last executing test programs: 3.954745715s ago: executing program 3 (id=1221): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=0x0], 0x128}, 0x8e9910aa44162ec7) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210827da7000fddbdf250300000c1400010000000000000000000000ffff64010102f07ef6e1f327d0bb50ce34ebe9c56e95df25"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x88efa964645774f0) socket(0x22, 0x5, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.081812487s ago: executing program 2 (id=1234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008081}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300"], 0xa0}, 0x1, 0xfffff000}, 0x0) 3.051099825s ago: executing program 3 (id=1235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) (async) epoll_create1(0x0) 3.046794598s ago: executing program 2 (id=1236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x384, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x344, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_XOR={0x8, 0x7, 0xfffffff9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_ACT={0x318, 0x9, 0x0, 0x1, [@m_connmark={0x124, 0x13, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x789, 0x7, 0x401, 0x58}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3d1, 0x1, 0x4, 0xa5f, 0x3}, 0xda5d}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x773, 0x8, 0x5, 0x5, 0xb0fd}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x80, 0x5, 0x6, 0x1ff}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x4, 0x9, 0x975b}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x800, 0x2, 0x1, 0xffffffac}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x401, 0x4, 0x86e, 0x5}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0x10000000, 0x8}, 0x1e3f}}]}, {0x13, 0x6, "660c1efa161bf7d51f5b570cec3254"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x110, 0xb, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x0, 0x8, 0x69ff8382, 0xb}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x5, 0x3, 0xfffffffd, 0x7fffffff}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x8, 0x9, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x6, 0x7, 0x6af, 0xffff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x1a1, 0x0, 0xae1e, 0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x1, 0x5, 0x4}, 0x3}}]}, {0x22, 0x6, "37e667bdc5ab024f2771ea646eeff0f781e16aae95d270a0b3111432de6d"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xe0, 0x9, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xdc, 0x20000000, 0x401, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x79de594a, 0xffffffffffffffff, 0x9, 0x4800000}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xa1, 0x0, 0x7, 0x7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x80000001, 0x7, 0x0, 0x6}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc0, 0x7, 0x7, 0x7, 0x8}, 0x7}}]}, {0x21, 0x6, "ff7f355770e9642c2850cfd416a035e280f877f123e9c26f13692cf7c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x384}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffff000000000000bbff0200000000000000000000000003018300907800100000fc000000000000000000000000e1f5e3c1346abd9e428463c4d528fdffffffffffffff94000000000000000000"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000370400000000efffffff00000000", @ANYRES32=r4, @ANYBLOB="8704050044800000240012800b000100677265746170000014000280060010004e21000008000700acc7"], 0x44}}, 0x20008884) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x6, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x2008c0c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xf}}}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x60002008}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x40001) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x180, 0x24, 0x300, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7fff}, {0xfff3, 0xfff2}, {0xc, 0x5}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x72, 0x2, 0xd500, 0xe3, 0x2, 0x800, 0x0, 0x1}}, {0x6, 0x2, [0x800]}}, {{0x1c, 0x1, {0x10, 0x7, 0x8268, 0x5, 0x0, 0x6, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x4, 0x5f, 0x6, 0x0, 0x1, 0x9, 0x2, 0x5}}, {0xe, 0x2, [0x3, 0xb6, 0x4, 0x2, 0x400]}}, {{0x1c, 0x1, {0x2, 0x4, 0x5, 0x0, 0x0, 0xb1, 0x9, 0x8}}, {0x14, 0x2, [0x3, 0x6, 0x6, 0x3, 0x5, 0xe4, 0x5, 0xcc]}}]}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x4, 0x7, 0x7, 0x2, 0x8, 0x3c28b352, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x8, 0x4, 0x5, 0x1, 0x0, 0x4, 0x1, 0x4}}, {0xc, 0x2, [0x3, 0x101, 0x93b0, 0x14]}}, {{0x1c, 0x1, {0x9, 0x6, 0x3, 0x5, 0x3, 0xbdb, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7, 0xe, 0x8, 0x800, 0x1, 0x5, 0x5, 0x6}}, {0x10, 0x2, [0x30ea, 0x1, 0xfff9, 0x5, 0x6, 0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2f}]}, 0x180}, 0x1, 0x0, 0x0, 0x30000000}, 0x800) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000318001b000000008eefa7240001000000"], 0x30}}, 0x0) close(r6) readv(r0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'ipvlan0\x00', 0x800}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'ip6gretap0\x00', @multicast}) 2.117818969s ago: executing program 3 (id=1254): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x388}}, 0x24044800) 2.115102843s ago: executing program 1 (id=1255): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.092059754s ago: executing program 2 (id=1256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x100, 0xb, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x5, 0x1, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x8, 0x9, 0x7f0, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x6, 0xb5d, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x9, 0x7, 0x101}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x2, 0x7f}}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.921856332s ago: executing program 1 (id=1258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8004}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94) 1.902494432s ago: executing program 3 (id=1259): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1.87445733s ago: executing program 1 (id=1260): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2c, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1d, &(0x7f0000000240)=""/29, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}, 0xa}, {{0x0, 0x0, 0x0}, 0x8}], 0x47, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x4000000000000c4, 0x10160, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) readv(r2, &(0x7f0000000500)=[{&(0x7f00000006c0)=""/245, 0xf5}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x1, 0xffefffff}]}]}, {0x0, [0x5f]}}, 0x0, 0x33, 0x0, 0x1, 0x9}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x88f7}}}}, 0x16) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.497667352s ago: executing program 0 (id=1261): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a3bc00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000003000000000000000000000005e00100000000000700000000000000184000000200000000000000000000000500fcff0000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000140085000000190000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r6, 0x3, 0x7f, 0x8402}, 0x10) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.451710961s ago: executing program 4 (id=1262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x40002}, [@printk={@d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6b12, 0x0, 0x0, 0x0, 0x3}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000280)={@empty, @empty, 0x13, 0x6}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x802, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40841}, 0x4000081) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b0f, &(0x7f0000000000)={'sit0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 1.414091523s ago: executing program 0 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.349825671s ago: executing program 3 (id=1264): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000400)=0x40) 1.349559707s ago: executing program 4 (id=1265): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x3) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) r5 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) (async) r6 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x40) 1.34882138s ago: executing program 0 (id=1266): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x5, 0x9, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x85, &(0x7f0000000100)=""/133, 0x40f00, 0x41}, 0x94) (async, rerun: 32) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r3 = socket(0xa, 0x3, 0x87) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x890b, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}, 0x1}) (async, rerun: 32) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1.345454635s ago: executing program 2 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x3c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xac}, 0x1, 0x0, 0x0, 0x818}, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4008000) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f00000003c0), {[{{@ipv6={@empty, @private2, [0x0, 0xffffffff, 0x0, 0x1fe000000], [0xffffff00, 0x0, 0x0, 0xffffffff], 'hsr0\x00', 'syzkaller1\x00', {0xff}, {}, 0x2, 0xa, 0x9, 0x11}, 0x0, 0x118, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @common=@dst={{0x48}, {0x5, 0x6, 0x0, [0x3, 0xfff7, 0x5, 0x8001, 0xa5b, 0x8001, 0x0, 0x5, 0x8, 0x6, 0x4, 0x4, 0x9, 0x3, 0x800, 0x6]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6, 0x1}, {0x3, 0x3, 0x4}, 0x44, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000740)={0x1f, @none, 0x2}, 0xa) r6 = socket$netlink(0x10, 0x3, 0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}}, 0x24008091) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0x200}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000ac0)={r10, @in6={{0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0xfffc, 0x8}, &(0x7f0000000b80)=0x90) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000bc0)={r6, 0x5, 0x7, 0x80}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c00)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x4, 0x5, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x64, 0x0, 0x1, 0x2f, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0x23, 0x77, [@rand_addr=0x64010101, @rand_addr=0x64010101, @loopback, @broadcast, @local, @remote, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x14, 0x1, [{0x1, 0x5, "43a4f6"}, {0x3, 0x9, "8ad5ed2bbf0556"}]}, @timestamp={0x44, 0x20, 0x1c, 0x0, 0x0, [0x8000, 0x4, 0xd5a, 0x6, 0x8fc0, 0x351e, 0x9]}, @lsrr={0x83, 0x7, 0x13, [@broadcast]}]}}}}}) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000d00)={0xffffffffffffffff, 0x0, 0x2, r12, 0x80000001}, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000d40)={@none, 0xf}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000001180)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000e40)={0x2fc, r14, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x114, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a5fc37fd0d31"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x80}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7239c8a3ca78"}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0eef4ba89e0c"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xa}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x80000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f8ca9666bbe3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7527e1424b07"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x98b6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xb8e5fc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x10001}, @NL80211_BAND_5GHZ={0x8}]}]}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x69}}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x804}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1a8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xe8, 0x2, "8d8d29e7aaa1c2b78494d8d54475d021ecd574c758db18746746c15ebcf62cdb071a5b858d1c2af1d13475e22e76b07497e4e83b1fa2f4e97448dd438ea328123e8ba68418ed90a5377b1c671f7633ee91a6b057494d42585b69c213f72d0cde64cd4f470c62420539884aa324ff6a061a66fe5f8fef0ce51937fa7a95adc2942af99443e4cac229dbf4bf7ed064cac1e929a214ab264687c99cf31447bc3a8ec168553c7bed2ffa03cabd5db95ed76d8a2644d8ea284984ba85b535f1d47a98d08de9c81c69d625f9527e7bd912299564636986f60b0808def7d671f771b58032cc0d6e"}, @NL80211_BAND_5GHZ={0xb9, 0x1, "6b4c905a72e7ea3761ca85248c9e9f84cad5856df8d9b9ff02fb66a9effbe67cbaea129e9e70acd222e1fcf9a95bf2084be045f0863c8550fcd614c910591a637dbf6bede97706ae1a033afc1135f32ce3e01514e9cc5af561dd532aa9305bae11810e07fcddad38513b320f89f8651cf812fa158792c7e4b59fa3f1eb4fe2d5d0296b26ef65fb07833dcf52c52f625c841e2d8bc80edb6fdfe468a4890a20f84075baebf787f9f1943e2f937e2f922a46b354faab"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x4}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x884}, 0x4000000) r16 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x404400, 0x0) ioctl$TUNSETOFFLOAD(r16, 0x400454d0, 0x67074bfb76b8917) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x64, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbcd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 1.310989186s ago: executing program 4 (id=1268): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r2, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_cmd={0x7, 0x7, 0xd, 0x1, 0x0, 0x73, 0x5d, 0xfc, 0x6, 0x8, 0xf7ffff04, 0x9, 0x3, 0x4, 0x9, 0x0, [0x80, 0x9]}}) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89b1, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffe}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f15", 0x46) r7 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) r8 = socket$l2tp6(0xa, 0x2, 0x73) unshare(0x22020400) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r9, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 1.161639173s ago: executing program 0 (id=1269): unshare(0x13040100) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0300000000000000000002000900010073797a300000000014000000020a0302000010000000000002000003140000001100010000000000000000000000000aea2edcee96f992ca8c47d33bad1629ab361d453bfc4a8f5f134d96d2f326194393f179263dc2c3f17477c29163c4860e76498869e9486b525d7cded61842aa5dd0232cb2424dcb578bfa7b3b5df7e97723ff3c9f447e0eba43fbdf0ff930961e62e15ebaaf45e76dc20fde6a65650e5bac5a0eac4d18bcf834b57dcc"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00001005000000031500"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000000bca900000000000300000000000000009500000000000000bf98000000000000560800b7000000000000009500"/81], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48840}, 0x4990) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1ef", 0x23}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001146000002f0600ac141430e0000003808a8972bd0b72e410"], 0xdd12}], 0x1}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc8f}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20004000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000009c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4085) 1.160753634s ago: executing program 2 (id=1270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000080)={0x848, 0x0, [0x4, 0xffffffff, 0x2, 0x3]}) 1.091171983s ago: executing program 2 (id=1271): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0xfffffffffffffcd6}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0xfffffffffffffef7, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2, 0x0, 0x5}, 0x18) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r3, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000580)={0xfffffffd, "98c963d4d71988a78228817da582199194b06d7cc1c3c64a46655406c0464774db779b3536bca596e5ca90acca3f1c76a05e70806b36863ecbbcd57571adae421abec11301ed96b458c8a8a8d58c4001b619bc78591834dc235c23035ee6b3f8941c3c5e48c770038f1e9b708f5ae83fa0bfb547cdbe5e6c4541dd68fa26d4ef"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000480)={'wg1\x00'}) write$tun(r4, &(0x7f0000000640)={@val={0xa}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @private0, @local, @mcast1}}, 0x38) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 877.001697ms ago: executing program 1 (id=1272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@mcast1, r2}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/35, 0x30}], 0x1, 0x0, 0xffffffffffffff6f}, 0x2002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000300)={{r0}, 0x2, &(0x7f00000002c0)=[0x3, 0x8000000000000001], 0x0, 0xe, 0x1}) 765.78657ms ago: executing program 1 (id=1273): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xe, 0x0, &(0x7f0000000300)=0xffffffffffffffa3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r5}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0xd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x2004c088) 733.889938ms ago: executing program 1 (id=1274): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 490.371128ms ago: executing program 3 (id=1275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xac}}, 0x20050800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) shutdown(r2, 0x1) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=@gettfilter={0x64, 0x2e, 0x400, 0x70bd2c, 0x5dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xd, 0xffff}, {0x1, 0xf}}, [{0x8, 0xb, 0x6ddf}, {0x8}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xf283}]}, 0x64}, 0x1, 0x0, 0x0, 0x24044000}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x20000080) sendto$packet(r8, &(0x7f0000000000)='5', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0x9, 0x6, @broadcast}, 0x14) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="0b2405ba75af8abab632f652b2e020ca63ce0a8243549a69cc1125072207c04785c1906d3c33262000eb1639725fa7b97b2181aee80f1b43a507c92f5e25600ab92f697cedca32f8cde6d5e2ee00089282ff00ffdfe7b4b6b658d8b0b10aea4a26690e9859caafe14fcf19c396eacd4eb143b41c84ac8e30803f9378d0cea8d7a00ef9cef511ddfb94113d05399be6494b6afcf7ec3ecb1d255550e880413bb3f6bc1f1f99e202c385b9ce8cd15e6ecbbe2a9df75a60bdf2d35f287600000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x8d0}, 0x84) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) 377.991966ms ago: executing program 4 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 377.125855ms ago: executing program 4 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0xd4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xa4, 0x2, {{0x100, 0xb, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x7, 0x5, 0x1, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x8, 0x9, 0x7f0, 0x9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x6, 0xb5d, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x9, 0x7, 0x101}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x2, 0x7f}}]}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 193.330641ms ago: executing program 4 (id=1278): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000280)}, 0x10) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, 0x0}}], 0x1, 0x844) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async, rerun: 32) r8 = socket$inet(0x2, 0x3, 0x4) (rerun: 32) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x64, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1644}, @TCA_TBF_RATE64={0xc, 0x4, 0x44d485d9f3e34d96}, @TCA_TBF_PRATE64={0xc, 0x5, 0xb04c73c4e8adee02}, @TCA_TBF_PBURST={0x8, 0x7, 0xfe}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x26, 0x1, 0x8, 0x6, 0x1, 0x8}, {0x1, 0x1, 0x8, 0xf408, 0x2, 0x100}, 0xe, 0x5, 0x508}}, @TCA_TBF_PBURST={0x1, 0x7, 0x4d8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x7, 0x2, 0x2, 0x7, 0xfff}}, {0x4}}]}]}, 0xb4}}, 0x40000) 165.938402ms ago: executing program 0 (id=1279): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000700000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600001e95"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x26020480) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000800)="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", 0x187}, {&(0x7f0000000b80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a40000000000000400b3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba9dcf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b22eaf0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e20a85060fd22f76c0881d580a3dd605c7141cad1b86efab52a7c54e19d4eaf37a3e197c8d5de653d4c11398fcfd06364a7048a859499dac446fa1b3a0aadaa1877a39820821eb6ff5baee46a123ea09f44bcfaca1b9d418a5213b", 0x123}, {&(0x7f00000009c0)="be7c1cae9fefed7e59316bed37f6eb36ec4ae1d442c67a5ebe9c15b771b531c47f64cab99da329281995ab70d9050519f74cd1e2452bb8cd6db0f53fd7704760879975a8bd737f94242292127be5fe50b61bfa175613e5ddf7e0591978478c7c6fa4657c18e7881159ee6f5707094c9c6deb12b31a2c7282ab105fcdb4c9b99ed9ed061fb4e29befe46a0ae9592863281e3ed4185d4eda3dcf06c92755b659704fc52bdf", 0xa4}], 0x4}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 0s ago: executing program 0 (id=1280): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x204040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='afs_make_fs_call1\x00', r6, 0x0, 0x100000000000000}, 0x18) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) write$rfkill(r0, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x1}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 49.988002][ T5847] cgroup: Unknown subsys name 'net' [ 50.117487][ T5847] cgroup: Unknown subsys name 'cpuset' [ 50.124604][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.235950][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.118836][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.132333][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.139944][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.150778][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.157908][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.158718][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.165042][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.172525][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.180003][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.186950][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.193531][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.200438][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.226424][ T5870] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.238103][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.250699][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.258048][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.259728][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.265843][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.279964][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.288364][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.288999][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.295568][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.310435][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.318022][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.339413][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.539320][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 53.662462][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 53.718883][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 53.787530][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.794805][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.802209][ T5857] bridge_slave_0: entered allmulticast mode [ 53.808931][ T5857] bridge_slave_0: entered promiscuous mode [ 53.819602][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.826788][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.833940][ T5857] bridge_slave_1: entered allmulticast mode [ 53.840780][ T5857] bridge_slave_1: entered promiscuous mode [ 53.849814][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 53.925560][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.934818][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.942777][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.950230][ T5858] bridge_slave_0: entered allmulticast mode [ 53.957235][ T5858] bridge_slave_0: entered promiscuous mode [ 53.971916][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.979397][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.986859][ T5868] bridge_slave_0: entered allmulticast mode [ 53.993812][ T5868] bridge_slave_0: entered promiscuous mode [ 54.002223][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.019544][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.026754][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.033866][ T5858] bridge_slave_1: entered allmulticast mode [ 54.041310][ T5858] bridge_slave_1: entered promiscuous mode [ 54.063895][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.071142][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.078392][ T5868] bridge_slave_1: entered allmulticast mode [ 54.084885][ T5868] bridge_slave_1: entered promiscuous mode [ 54.103407][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 54.124685][ T5857] team0: Port device team_slave_0 added [ 54.131934][ T5857] team0: Port device team_slave_1 added [ 54.139715][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.166660][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.182852][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.204506][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.211822][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.219729][ T5865] bridge_slave_0: entered allmulticast mode [ 54.226331][ T5865] bridge_slave_0: entered promiscuous mode [ 54.234583][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.258973][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.266206][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.273401][ T5865] bridge_slave_1: entered allmulticast mode [ 54.280884][ T5865] bridge_slave_1: entered promiscuous mode [ 54.300851][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.307850][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.334085][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.346085][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.353035][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.378972][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.408983][ T5868] team0: Port device team_slave_0 added [ 54.427587][ T5858] team0: Port device team_slave_0 added [ 54.441315][ T5868] team0: Port device team_slave_1 added [ 54.448658][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.460126][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.470743][ T5858] team0: Port device team_slave_1 added [ 54.512531][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.519999][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.527450][ T5863] bridge_slave_0: entered allmulticast mode [ 54.533940][ T5863] bridge_slave_0: entered promiscuous mode [ 54.547402][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.554365][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.580387][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.603232][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.610411][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.617766][ T5863] bridge_slave_1: entered allmulticast mode [ 54.624530][ T5863] bridge_slave_1: entered promiscuous mode [ 54.637865][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.644827][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.671469][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.683197][ T5865] team0: Port device team_slave_0 added [ 54.690102][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.697517][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.723581][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.743126][ T5857] hsr_slave_0: entered promiscuous mode [ 54.749288][ T5857] hsr_slave_1: entered promiscuous mode [ 54.759740][ T5865] team0: Port device team_slave_1 added [ 54.765984][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.772923][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.798914][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.837468][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.871855][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.898034][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.904992][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.931218][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.943181][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.950490][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.977085][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.996908][ T5868] hsr_slave_0: entered promiscuous mode [ 55.002970][ T5868] hsr_slave_1: entered promiscuous mode [ 55.009189][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 55.015005][ T5868] Cannot create hsr debugfs directory [ 55.034434][ T5863] team0: Port device team_slave_0 added [ 55.042248][ T5863] team0: Port device team_slave_1 added [ 55.061930][ T5858] hsr_slave_0: entered promiscuous mode [ 55.068098][ T5858] hsr_slave_1: entered promiscuous mode [ 55.073936][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 55.080283][ T5858] Cannot create hsr debugfs directory [ 55.141382][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.148616][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.174628][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.203989][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.211210][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.237156][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.250610][ T5865] hsr_slave_0: entered promiscuous mode [ 55.256870][ T5865] hsr_slave_1: entered promiscuous mode [ 55.262889][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 55.268780][ T5865] Cannot create hsr debugfs directory [ 55.275735][ T5870] Bluetooth: hci0: command tx timeout [ 55.281203][ T5860] Bluetooth: hci1: command tx timeout [ 55.356457][ T5870] Bluetooth: hci4: command tx timeout [ 55.356463][ T5864] Bluetooth: hci2: command tx timeout [ 55.367727][ T5860] Bluetooth: hci3: command tx timeout [ 55.372837][ T5863] hsr_slave_0: entered promiscuous mode [ 55.379425][ T5863] hsr_slave_1: entered promiscuous mode [ 55.385313][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 55.391095][ T5863] Cannot create hsr debugfs directory [ 55.495124][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.521188][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.530335][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.558227][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.622078][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.630733][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.646566][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.655434][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.697845][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.708252][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.718124][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.728138][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.798533][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.808326][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.818777][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.841258][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.854645][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.883595][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.894075][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.915332][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.924795][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.937730][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.958691][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.965870][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.994190][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.001345][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.015031][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.051701][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.072167][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.093424][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.100645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.117284][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.133547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.140689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.173132][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.190469][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.197614][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.237955][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.245147][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.270607][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.307285][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.314398][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.339142][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.350436][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.372923][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.380108][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.400217][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.452479][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.510523][ T3566] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.517687][ T3566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.533294][ T3566] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.540445][ T3566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.552233][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.660392][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.684265][ T5857] veth0_vlan: entered promiscuous mode [ 56.734060][ T5857] veth1_vlan: entered promiscuous mode [ 56.753514][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.772763][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.842117][ T5863] veth0_vlan: entered promiscuous mode [ 56.868767][ T5857] veth0_macvtap: entered promiscuous mode [ 56.881744][ T5858] veth0_vlan: entered promiscuous mode [ 56.895021][ T5863] veth1_vlan: entered promiscuous mode [ 56.908809][ T5857] veth1_macvtap: entered promiscuous mode [ 56.922453][ T5858] veth1_vlan: entered promiscuous mode [ 56.941424][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.961910][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.999721][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.018300][ T5863] veth0_macvtap: entered promiscuous mode [ 57.031076][ T3583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.046659][ T3583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.059457][ T5858] veth0_macvtap: entered promiscuous mode [ 57.067984][ T5863] veth1_macvtap: entered promiscuous mode [ 57.080080][ T3583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.089160][ T3583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.116954][ T5858] veth1_macvtap: entered promiscuous mode [ 57.130212][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.154731][ T5865] veth0_vlan: entered promiscuous mode [ 57.169166][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.197061][ T3566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.207839][ T3566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.217520][ T3566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.226664][ T3566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.236740][ T5868] veth0_vlan: entered promiscuous mode [ 57.244258][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.254988][ T5865] veth1_vlan: entered promiscuous mode [ 57.265830][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.270343][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.273661][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.302796][ T3566] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.312477][ T3566] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.333505][ T3566] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.342533][ T3566] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.354895][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.363581][ T5870] Bluetooth: hci1: command tx timeout [ 57.369092][ T5860] Bluetooth: hci0: command tx timeout [ 57.375313][ T5868] veth1_vlan: entered promiscuous mode [ 57.376159][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.430046][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.445901][ T5870] Bluetooth: hci2: command tx timeout [ 57.447852][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.451305][ T5870] Bluetooth: hci4: command tx timeout [ 57.462081][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.464644][ T5860] Bluetooth: hci3: command tx timeout [ 57.485280][ T5865] veth0_macvtap: entered promiscuous mode [ 57.502330][ T5865] veth1_macvtap: entered promiscuous mode [ 57.539210][ T5973] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.569116][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.578013][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.605710][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.613876][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.644848][ T5868] veth0_macvtap: entered promiscuous mode [ 57.663977][ T5868] veth1_macvtap: entered promiscuous mode [ 57.687704][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.701933][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.722566][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.733017][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.753167][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.765423][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.777804][ T5976] sctp: [Deprecated]: syz.3.4 (pid 5976) Use of int in max_burst socket option. [ 57.777804][ T5976] Use struct sctp_assoc_value instead [ 57.778734][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.825898][ T3583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.867612][ T3583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.884625][ T3583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917803][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.938518][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.994443][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.013348][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.113170][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.135235][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.170555][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.185927][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.200150][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 58.212219][ T5985] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8'. [ 58.218889][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.233829][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.234429][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'. [ 58.332495][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.360154][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.475178][ T5993] tipc: Started in network mode [ 58.484219][ T5993] tipc: Node identity f67f51873bf6, cluster identity 4711 [ 58.494464][ T5993] tipc: Enabled bearer , priority 0 [ 58.512437][ T5993] syzkaller0: entered promiscuous mode [ 58.519901][ T5993] syzkaller0: entered allmulticast mode [ 58.535516][ T5993] tipc: Resetting bearer [ 58.784815][ T6008] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 58.825799][ T6008] netlink: 168 bytes leftover after parsing attributes in process `syz.2.14'. [ 59.290036][ T5992] tipc: Resetting bearer [ 59.301824][ T5992] tipc: Disabling bearer [ 59.422455][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 59.435981][ T5860] Bluetooth: hci1: command tx timeout [ 59.441410][ T5860] Bluetooth: hci0: command tx timeout [ 59.515787][ T5860] Bluetooth: hci3: command tx timeout [ 59.516884][ T5870] Bluetooth: hci4: command tx timeout [ 59.521352][ T5860] Bluetooth: hci2: command tx timeout [ 59.573078][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 59.710999][ T6049] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 59.755394][ T6049] netlink: 'syz.1.24': attribute type 2 has an invalid length. [ 59.784139][ T6057] netlink: 104 bytes leftover after parsing attributes in process `syz.4.25'. [ 59.862809][ T6061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.260595][ T6077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.31'. [ 60.288903][ T6077] Zero length message leads to an empty skb [ 60.309413][ T6079] bridge0: entered promiscuous mode [ 60.316434][ T6079] macsec1: entered promiscuous mode [ 60.326350][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 60.345487][ T6079] macsec1: entered allmulticast mode [ 60.358756][ T6079] bridge0: entered allmulticast mode [ 60.384871][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.392361][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.580439][ T6097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.621771][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 60.805799][ T6108] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 61.449553][ T6137] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.525659][ T5860] Bluetooth: hci1: command tx timeout [ 61.525832][ T5870] Bluetooth: hci0: command tx timeout [ 61.596176][ T5870] Bluetooth: hci4: command tx timeout [ 61.596186][ T5860] Bluetooth: hci2: command tx timeout [ 61.596210][ T5860] Bluetooth: hci3: command tx timeout [ 61.735524][ T6137] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.874630][ T6137] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.942957][ T6172] team0: entered promiscuous mode [ 61.948473][ T6172] team_slave_0: entered promiscuous mode [ 61.956478][ T6172] team_slave_1: entered promiscuous mode [ 61.980125][ T6137] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.012914][ T6172] warning: `syz.3.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.339777][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.375945][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.404101][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.485338][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.789647][ T43] IPVS: starting estimator thread 0... [ 62.902203][ T6240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.915757][ T6234] IPVS: using max 46 ests per chain, 110400 per kthread [ 63.263747][ T6262] __nla_validate_parse: 9 callbacks suppressed [ 63.263765][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 63.302305][ T6268] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.66'. [ 63.315010][ T6273] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 63.350013][ T6275] netlink: 'syz.2.64': attribute type 6 has an invalid length. [ 63.374492][ T6262] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 63.384501][ T6262] macvtap1: entered promiscuous mode [ 63.518602][ T6282] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 63.639360][ T6291] netlink: 96 bytes leftover after parsing attributes in process `syz.2.71'. [ 63.666920][ T6295] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.670162][ T6301] netlink: 104 bytes leftover after parsing attributes in process `syz.1.75'. [ 63.736836][ T6309] netlink: 84 bytes leftover after parsing attributes in process `syz.1.77'. [ 63.803105][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.820759][ T6311] batadv_slave_0: entered promiscuous mode [ 63.860207][ T6324] sctp: [Deprecated]: syz.4.82 (pid 6324) Use of int in max_burst socket option. [ 63.860207][ T6324] Use struct sctp_assoc_value instead [ 63.880677][ T6324] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.82'. [ 63.902618][ T6325] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 64.029893][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 64.814340][ T6337] netlink: 'syz.1.86': attribute type 10 has an invalid length. [ 64.849278][ T6337] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.036713][ T6369] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 65.051571][ T6369] netlink: 144 bytes leftover after parsing attributes in process `syz.1.95'. [ 65.060762][ T6369] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 65.401911][ T6383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.97'. [ 65.595752][ T5860] Bluetooth: hci1: command 0x080f tx timeout [ 65.783147][ T6387] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 65.813242][ T6357] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 65.851024][ T6389] syz_tun: entered allmulticast mode [ 65.857742][ T6389] syz_tun: left allmulticast mode [ 65.980429][ T6403] nbd: must specify a size in bytes for the device [ 66.125375][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 66.172778][ T6423] trusted_key: syz.3.113 sent an empty control message without MSG_MORE. [ 66.260697][ T6432] FAULT_INJECTION: forcing a failure. [ 66.260697][ T6432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.288287][ T6432] CPU: 1 UID: 0 PID: 6432 Comm: syz.1.116 Not tainted syzkaller #0 PREEMPT(full) [ 66.288313][ T6432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.288324][ T6432] Call Trace: [ 66.288330][ T6432] [ 66.288338][ T6432] dump_stack_lvl+0x189/0x250 [ 66.288361][ T6432] ? __pfx____ratelimit+0x10/0x10 [ 66.288383][ T6432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.288401][ T6432] ? __pfx__printk+0x10/0x10 [ 66.288419][ T6432] ? __might_fault+0xb0/0x130 [ 66.288442][ T6432] ? __pfx_get_page_from_freelist+0x10/0x10 [ 66.288460][ T6432] ? rcu_is_watching+0x15/0xb0 [ 66.288477][ T6432] should_fail_ex+0x414/0x560 [ 66.288500][ T6432] _copy_from_iter+0x1db/0x16f0 [ 66.288519][ T6432] ? unwind_next_frame+0xa5/0x2390 [ 66.288538][ T6432] ? policy_nodemask+0x27c/0x720 [ 66.288560][ T6432] ? __pfx__copy_from_iter+0x10/0x10 [ 66.288578][ T6432] ? set_page_refcounted+0xa0/0x1e0 [ 66.288600][ T6432] ? page_copy_sane+0x4e/0x280 [ 66.288617][ T6432] copy_page_from_iter+0xdd/0x170 [ 66.288635][ T6432] tun_get_user+0x1d7b/0x3e20 [ 66.288654][ T6432] ? tun_get_user+0x6f6/0x3e20 [ 66.288706][ T6432] ? aa_file_perm+0x44d/0x1550 [ 66.288723][ T6432] ? __pfx_tun_get_user+0x10/0x10 [ 66.288739][ T6432] ? _parse_integer_limit+0x1ae/0x1f0 [ 66.288765][ T6432] ? kstrtoull+0x12f/0x1d0 [ 66.288790][ T6432] ? ref_tracker_alloc+0x318/0x460 [ 66.288811][ T6432] ? get_pid_task+0x20/0x1f0 [ 66.288830][ T6432] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 66.288853][ T6432] ? tun_get+0x1c/0x2f0 [ 66.288868][ T6432] ? tun_get+0x1c/0x2f0 [ 66.288883][ T6432] ? rcu_is_watching+0x15/0xb0 [ 66.288898][ T6432] ? tun_get+0x1c/0x2f0 [ 66.288912][ T6432] ? lock_release+0x4b/0x3e0 [ 66.288933][ T6432] ? common_file_perm+0x1b5/0x230 [ 66.288957][ T6432] ? tun_get+0x1c/0x2f0 [ 66.288975][ T6432] tun_chr_write_iter+0x113/0x200 [ 66.288993][ T6432] vfs_write+0x5c9/0xb30 [ 66.289016][ T6432] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 66.289033][ T6432] ? __pfx_vfs_write+0x10/0x10 [ 66.289058][ T6432] ? __fget_files+0x2a/0x420 [ 66.289076][ T6432] ksys_write+0x145/0x250 [ 66.289096][ T6432] ? __pfx_ksys_write+0x10/0x10 [ 66.289116][ T6432] ? rcu_is_watching+0x15/0xb0 [ 66.289134][ T6432] ? rcu_is_watching+0x15/0xb0 [ 66.289151][ T6432] do_syscall_64+0xfa/0x3b0 [ 66.289167][ T6432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.289183][ T6432] ? clear_bhb_loop+0x60/0xb0 [ 66.289201][ T6432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.289217][ T6432] RIP: 0033:0x7f92b998d69f [ 66.289242][ T6432] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 66.289256][ T6432] RSP: 002b:00007f92ba733000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 66.289275][ T6432] RAX: ffffffffffffffda RBX: 00007f92b9bb5fa0 RCX: 00007f92b998d69f [ 66.289288][ T6432] RDX: 0000000000000046 RSI: 0000200000000180 RDI: 00000000000000c8 [ 66.289298][ T6432] RBP: 00007f92ba733090 R08: 0000000000000000 R09: 0000000000000000 [ 66.289308][ T6432] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 66.289317][ T6432] R13: 00007f92b9bb6038 R14: 00007f92b9bb5fa0 R15: 00007ffe52326678 [ 66.289335][ T6432] [ 67.037473][ T5860] Bluetooth: hci0: command 0x0401 tx timeout [ 67.050642][ T6468] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 67.060621][ T6465] Bluetooth: MGMT ver 1.23 [ 67.072136][ T6468] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.383506][ T6490] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 67.393091][ T6490] netlink: 'syz.4.133': attribute type 2 has an invalid length. [ 67.402446][ T6490] netlink: 'syz.4.133': attribute type 8 has an invalid length. [ 67.571820][ T6500] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 67.600101][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.623482][ T6500] bond1: (slave gretap1): making interface the new active one [ 67.637427][ T6500] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 68.304131][ T6533] __nla_validate_parse: 15 callbacks suppressed [ 68.304150][ T6533] netlink: 40 bytes leftover after parsing attributes in process `syz.0.146'. [ 68.403339][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 68.447237][ T6545] openvswitch: netlink: IP tunnel dst address not specified [ 68.576106][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.150'. [ 68.688296][ T6555] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 68.696140][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.150'. [ 68.749463][ T6564] tipc: Started in network mode [ 68.766820][ T6564] tipc: Node identity 8eae2e076711, cluster identity 4711 [ 68.792284][ T6564] tipc: Enabled bearer , priority 0 [ 68.820563][ T6566] tipc: Enabling of bearer rejected, already enabled [ 68.964485][ T6564] tipc: Disabling bearer [ 69.064717][ T6575] geneve0: entered promiscuous mode [ 69.075137][ T6575] vlan2: entered promiscuous mode [ 69.237191][ T6582] tipc: Started in network mode [ 69.246084][ T6582] tipc: Node identity 5ee4a97d1ea3, cluster identity 4711 [ 69.278727][ T6582] tipc: Enabled bearer , priority 0 [ 69.305968][ T6582] syzkaller0: entered promiscuous mode [ 69.311528][ T6582] syzkaller0: entered allmulticast mode [ 69.374859][ T6582] netlink: 'syz.3.155': attribute type 1 has an invalid length. [ 69.384079][ T6582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.155'. [ 69.403272][ T6582] tipc: Resetting bearer [ 69.424670][ T6581] tipc: Resetting bearer [ 69.433917][ T6581] tipc: Disabling bearer [ 69.542647][ T6608] netlink: 96 bytes leftover after parsing attributes in process `syz.2.163'. [ 69.555520][ T6611] netlink: 124 bytes leftover after parsing attributes in process `syz.4.165'. [ 69.610885][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 69.673351][ T6612] netlink: 36 bytes leftover after parsing attributes in process `syz.3.164'. [ 69.727502][ T6621] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 69.764529][ T6628] IPVS: set_ctl: invalid protocol: 94 10.1.1.1:20001 [ 69.852739][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 69.866758][ T6638] batman_adv: batadv0: Adding interface: ipvlan2 [ 69.873279][ T6638] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.902047][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.912925][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.923353][ T6638] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 69.962011][ T6641] bond1: entered promiscuous mode [ 69.968440][ T6641] bond1: entered allmulticast mode [ 69.975184][ T6638] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 69.975341][ T6641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.051574][ T6652] syzkaller0: entered promiscuous mode [ 70.058831][ T6652] syzkaller0: entered allmulticast mode [ 71.441098][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.634453][ T6667] tipc: Enabled bearer , priority 0 [ 71.682897][ T6676] syzkaller0: entered promiscuous mode [ 71.699346][ T6676] syzkaller0: entered allmulticast mode [ 71.773356][ T6667] tipc: Resetting bearer [ 71.979711][ T6676] tipc: Resetting bearer [ 72.000290][ T6676] tipc: Disabling bearer [ 72.141665][ T6686] netlink: 'syz.2.183': attribute type 12 has an invalid length. [ 72.975092][ T6743] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.117223][ T6771] netlink: 'syz.1.207': attribute type 4 has an invalid length. [ 73.171470][ T6778] netlink: 'syz.1.207': attribute type 4 has an invalid length. [ 73.705030][ T6820] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 73.729348][ T6820] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 73.799030][ T10] IPVS: starting estimator thread 0... [ 73.799505][ T6822] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 73.906003][ T6825] IPVS: using max 42 ests per chain, 100800 per kthread [ 74.103961][ T6844] tipc: Enabling of bearer rejected, failed to enable media [ 74.273834][ T6858] __nla_validate_parse: 11 callbacks suppressed [ 74.273851][ T6858] netlink: 124 bytes leftover after parsing attributes in process `syz.0.235'. [ 74.298632][ T6858] IPVS: length: 209 != 24 [ 74.303411][ T6857] tap0: tun_chr_ioctl cmd 1074025678 [ 74.309872][ T6857] tap0: group set to 0 [ 74.335821][ T6862] nbd4: detected capacity change from 0 to 63 [ 74.343747][ T5860] block nbd4: Receive control failed (result -32) [ 74.462120][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'. [ 74.493195][ T6870] macvlan1: entered promiscuous mode [ 74.505719][ T6870] macvlan1: left promiscuous mode [ 74.524238][ T6871] bridge_slave_0: default FDB implementation only supports local addresses [ 74.611279][ T6877] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 74.619655][ T6877] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 74.867617][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 75.049934][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 75.068202][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.068342][ T30] audit: type=1800 audit(1755929216.452:2): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.248" name="memory.events" dev="tmpfs" ino=302 res=0 errno=0 [ 75.098424][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.104513][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 75.118703][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.128972][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.331353][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.338554][ T6924] bridge0: port 2(bridge_slave_1) entered listening state [ 75.345896][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.353022][ T6924] bridge0: port 1(bridge_slave_0) entered listening state [ 75.389127][ T6924] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 75.552305][ T6946] netlink: 88 bytes leftover after parsing attributes in process `syz.0.255'. [ 75.563159][ T6946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'. [ 75.578863][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 75.591906][ T6942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.604026][ T6942] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 75.715585][ T6960] Bluetooth: MGMT ver 1.23 [ 75.735445][ T6960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.742772][ T6960] IPv6: NLM_F_CREATE should be set when creating new route [ 75.750035][ T6960] IPv6: NLM_F_CREATE should be set when creating new route [ 75.758080][ T6960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.830520][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 75.948383][ T6974] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 75.957484][ T6974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.270'. [ 75.971226][ T6974] dummy0: entered promiscuous mode [ 75.978027][ T6974] dummy0: entered allmulticast mode [ 75.983823][ T6974] bridge0: port 3(dummy0) entered blocking state [ 75.990400][ T6974] bridge0: port 3(dummy0) entered disabled state [ 75.998997][ T6974] bridge0: port 3(dummy0) entered blocking state [ 76.005467][ T6974] bridge0: port 3(dummy0) entered listening state [ 76.046758][ T6982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.094593][ T6987] tipc: Started in network mode [ 76.099708][ T6987] tipc: Node identity b6bfbdb3bacd, cluster identity 4711 [ 76.107078][ T6987] tipc: Enabled bearer , priority 0 [ 76.108865][ T6982] "syz.4.272" (6982) uses obsolete ecb(arc4) skcipher [ 76.121919][ T6988] bond_slave_0: entered promiscuous mode [ 76.127693][ T6988] bond_slave_1: entered promiscuous mode [ 76.133936][ T6988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 76.143360][ T6988] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 76.170556][ T6987] syzkaller0: entered promiscuous mode [ 76.176099][ T6987] syzkaller0: entered allmulticast mode [ 76.182056][ T6987] tipc: Resetting bearer [ 76.194872][ T6982] bridge0: port 3(dummy0) entered disabled state [ 76.204139][ T6982] bridge_slave_0: left allmulticast mode [ 76.210880][ T6982] bridge_slave_0: left promiscuous mode [ 76.217755][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.227136][ T6982] bridge_slave_1: left allmulticast mode [ 76.232875][ T6982] bridge_slave_1: left promiscuous mode [ 76.239876][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.249189][ T6982] bond0: (slave bond_slave_0): Releasing backup interface [ 76.257260][ T6982] bond_slave_0: left promiscuous mode [ 76.264557][ T6982] bond0: (slave bond_slave_1): Releasing backup interface [ 76.273838][ T6982] bond_slave_1: left promiscuous mode [ 76.282652][ T6982] team0: Port device team_slave_0 removed [ 76.291568][ T6982] team0: Port device team_slave_1 removed [ 76.297966][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.305342][ T6982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.313925][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.321465][ T6982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.334060][ T6982] bond1: (slave gretap1): Releasing active interface [ 76.344371][ T6982] bond2: (slave macvlan2): Removing an active aggregator [ 76.352967][ T6982] bond2: (slave macvlan2): Releasing backup interface [ 76.365381][ T6986] tipc: Resetting bearer [ 76.406044][ T6986] tipc: Disabling bearer [ 76.511997][ T7008] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 76.530855][ T7008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.555120][ T7012] syzkaller1: entered promiscuous mode [ 76.563745][ T7012] syzkaller1: entered allmulticast mode [ 76.578990][ T7012] syzkaller1: left promiscuous mode [ 76.584327][ T7012] syzkaller1: left allmulticast mode [ 76.917652][ T7044] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.965423][ T7042] vlan2: entered allmulticast mode [ 76.971332][ T7042] bond1: entered allmulticast mode [ 76.998934][ T7051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.020941][ T7051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.035345][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.045541][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.055307][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.058074][ T7057] IPv6: Can't replace route, no match found [ 77.074633][ T7054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.090465][ T7054] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 77.102426][ T7058] netlink: 'syz.4.293': attribute type 4 has an invalid length. [ 77.130127][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.141508][ T7058] netlink: 'syz.4.293': attribute type 4 has an invalid length. [ 77.154674][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.157431][ T7058] netlink: 'syz.4.293': attribute type 4 has an invalid length. [ 77.173317][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.186629][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.197606][ T7054] wg1 speed is unknown, defaulting to 1000 [ 77.216274][ T7066] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 77.239813][ T7066] netlink: 'syz.0.297': attribute type 1 has an invalid length. [ 77.379332][ T7082] syzkaller0: entered promiscuous mode [ 77.385352][ T7082] syzkaller0: entered allmulticast mode [ 77.436818][ T7088] wg1 speed is unknown, defaulting to 1000 [ 77.608289][ T7109] netlink: 'syz.1.308': attribute type 32 has an invalid length. [ 77.616437][ T7109] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 77.627209][ T3523] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 78.376738][ T7134] netlink: 'syz.4.316': attribute type 3 has an invalid length. [ 78.516285][ T7146] wg1 speed is unknown, defaulting to 1000 [ 78.607177][ T7149] wg1 speed is unknown, defaulting to 1000 [ 78.781098][ T7164] netlink: 'syz.2.324': attribute type 11 has an invalid length. [ 79.307847][ T7180] __nla_validate_parse: 17 callbacks suppressed [ 79.307865][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 79.424368][ T7186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.712039][ T7207] netlink: 'syz.3.338': attribute type 1 has an invalid length. [ 79.737783][ T7207] netlink: 224 bytes leftover after parsing attributes in process `syz.3.338'. [ 79.760930][ T7224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 79.783068][ T7231] netlink: 104 bytes leftover after parsing attributes in process `syz.4.343'. [ 79.818073][ T7224] bond0: option ad_select: unable to set because the bond device is up [ 79.889071][ T7241] tc_dump_action: action bad kind [ 79.903156][ T7224] wg1 speed is unknown, defaulting to 1000 [ 79.924588][ T7241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.347'. [ 79.939232][ T7225] wg1 speed is unknown, defaulting to 1000 [ 79.996673][ T7250] nbd: must specify at least one socket [ 80.009536][ T7246] gtp0: entered promiscuous mode [ 80.015373][ T7246] gtp0: entered allmulticast mode [ 80.025318][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.350'. [ 80.035431][ T7250] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 80.123049][ T7256] netlink: 104 bytes leftover after parsing attributes in process `syz.1.352'. [ 80.167540][ T7262] netlink: 96 bytes leftover after parsing attributes in process `syz.2.355'. [ 80.187411][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 80.212044][ T7264] tipc: Enabled bearer , priority 0 [ 80.222256][ T7258] syzkaller0: entered promiscuous mode [ 80.247502][ T7258] syzkaller0: entered allmulticast mode [ 80.294742][ T7267] vlan2: entered promiscuous mode [ 80.313128][ T7267] vlan2: entered allmulticast mode [ 80.335276][ T7267] veth0_vlan: entered allmulticast mode [ 80.363482][ T7264] tipc: Resetting bearer [ 80.419913][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 80.460241][ T7268] wg1 speed is unknown, defaulting to 1000 [ 80.949122][ T7257] tipc: Resetting bearer [ 80.960182][ T7257] tipc: Disabling bearer [ 81.186895][ T7321] syzkaller0: entered promiscuous mode [ 81.207989][ T7321] syzkaller0: entered allmulticast mode [ 81.217369][ T7326] validate_nla: 4 callbacks suppressed [ 81.217387][ T7326] netlink: 'syz.4.370': attribute type 303 has an invalid length. [ 81.340362][ T7325] bridge_slave_0: left allmulticast mode [ 81.356601][ T7325] bridge_slave_0: left promiscuous mode [ 81.373607][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.404101][ T7325] bridge_slave_1: left allmulticast mode [ 81.415944][ T7325] bridge_slave_1: left promiscuous mode [ 81.431153][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.496067][ T7325] bond0: (slave bond_slave_0): Releasing backup interface [ 81.517601][ T7325] bond0: (slave bond_slave_1): Releasing backup interface [ 81.532886][ T7325] team_slave_0: left promiscuous mode [ 81.541574][ T7325] team0: Port device team_slave_0 removed [ 81.549044][ T7325] team_slave_1: left promiscuous mode [ 81.557775][ T7325] team0: Port device team_slave_1 removed [ 81.564527][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.573048][ T7325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.580963][ T7325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.592036][ T7325] bond0: (slave netdevsim0): Releasing backup interface [ 81.604067][ T7325] batman_adv: batadv0: Removing interface: ipvlan2 [ 81.676786][ T24] cfg80211: failed to load regulatory.db [ 81.765300][ T7362] tipc: Enabled bearer , priority 0 [ 81.819939][ T7362] syzkaller0: entered promiscuous mode [ 81.827036][ T7362] syzkaller0: entered allmulticast mode [ 81.840815][ T7354] wg1 speed is unknown, defaulting to 1000 [ 81.862851][ T7374] sctp: [Deprecated]: syz.2.381 (pid 7374) Use of int in maxseg socket option. [ 81.862851][ T7374] Use struct sctp_assoc_value instead [ 81.888848][ T7361] tipc: Resetting bearer [ 81.902746][ T7361] tipc: Disabling bearer [ 82.130291][ T7382] wg1 speed is unknown, defaulting to 1000 [ 82.548200][ T7405] tipc: Enabling of bearer rejected, failed to enable media [ 82.589111][ T7406] tipc: Enabling of bearer rejected, failed to enable media [ 82.712578][ T7412] wg1 speed is unknown, defaulting to 1000 [ 82.758241][ T7421] sctp: [Deprecated]: syz.1.392 (pid 7421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.758241][ T7421] Use struct sctp_sack_info instead [ 82.794037][ T7421] sctp: [Deprecated]: syz.1.392 (pid 7421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.794037][ T7421] Use struct sctp_sack_info instead [ 82.947723][ T7432] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 82.968105][ T7432] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 83.203732][ T7449] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 83.373916][ T7449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.694158][ T7458] tipc: Enabling of bearer rejected, failed to enable media [ 83.870040][ T7469] dvmrp8: entered allmulticast mode [ 84.113188][ T7513] tipc: Enabled bearer , priority 0 [ 84.137661][ T7514] syzkaller0: entered promiscuous mode [ 84.183641][ T7514] syzkaller0: entered allmulticast mode [ 84.214205][ T7517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.221663][ T7517] IPv6: NLM_F_CREATE should be set when creating new route [ 84.228946][ T7517] IPv6: NLM_F_CREATE should be set when creating new route [ 84.236199][ T7517] IPv6: NLM_F_CREATE should be set when creating new route [ 84.270999][ T7514] tipc: Resetting bearer [ 84.280455][ T7514] tipc: Disabling bearer [ 84.396416][ T7466] dvmrp8: left allmulticast mode [ 84.412429][ T7540] netlink: 'syz.0.419': attribute type 10 has an invalid length. [ 84.487751][ T7540] team0: Device ipvlan1 failed to register rx_handler [ 84.527303][ T7544] nbd1: detected capacity change from 0 to 549764202496 [ 84.541418][ T5860] block nbd1: Receive control failed (result -32) [ 84.741610][ T7560] syzkaller0: entered promiscuous mode [ 84.762513][ T7570] __nla_validate_parse: 10 callbacks suppressed [ 84.762533][ T7570] netlink: 71 bytes leftover after parsing attributes in process `syz.3.425'. [ 84.772873][ T7560] syzkaller0: entered allmulticast mode [ 84.930062][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 84.989236][ T7579] wg1 speed is unknown, defaulting to 1000 [ 84.998713][ T7587] tap0: tun_chr_ioctl cmd 2148553947 [ 85.012179][ T7587] openvswitch: netlink: IPv4 tun info is not correct [ 85.133748][ T7599] netlink: 304 bytes leftover after parsing attributes in process `syz.0.433'. [ 85.336585][ T7617] syzkaller0: entered promiscuous mode [ 85.342208][ T7617] syzkaller0: entered allmulticast mode [ 85.469759][ T7627] ip6gre1: entered allmulticast mode [ 85.478434][ T7625] wg1 speed is unknown, defaulting to 1000 [ 85.938670][ T7671] tipc: Started in network mode [ 85.943647][ T7671] tipc: Node identity 724e3f3e47e2, cluster identity 4711 [ 85.951078][ T7671] tipc: Enabled bearer , priority 0 [ 85.958759][ T7671] syzkaller0: entered promiscuous mode [ 85.975824][ T7671] syzkaller0: entered allmulticast mode [ 86.035282][ T7671] tipc: Resetting bearer [ 86.141906][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 86.478912][ T7722] netlink: 'syz.1.469': attribute type 4 has an invalid length. [ 86.483839][ T7723] ieee802154 phy0 wpan0: encryption failed: -90 [ 86.493946][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.692733][ T7665] tipc: Resetting bearer [ 86.710575][ T7665] tipc: Disabling bearer [ 86.872458][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.880110][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.996274][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.015078][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.094765][ T7761] bridge0: left allmulticast mode [ 87.105442][ T7776] netlink: 'syz.1.477': attribute type 10 has an invalid length. [ 87.125450][ T7765] _ÐZ`Ô€@S: entered promiscuous mode [ 87.131406][ T24] wg1 speed is unknown, defaulting to 1000 [ 87.141789][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.152545][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.163467][ T24] syz0: Port: 1 Link DOWN [ 87.171382][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.181268][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.219719][ T7780] netlink: 'syz.2.481': attribute type 2 has an invalid length. [ 87.229919][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.2.481'. [ 87.250715][ T7780] netlink: 32 bytes leftover after parsing attributes in process `syz.2.481'. [ 87.482568][ T7799] wg1 speed is unknown, defaulting to 1000 [ 87.569909][ T7796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.654354][ T7796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.726164][ T7796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.824223][ T7796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.912207][ T3583] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.950688][ T3583] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.969864][ T3583] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.002691][ T3583] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.118162][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 88.151439][ T7812] veth1_macvtap: left promiscuous mode [ 88.286967][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 88.297717][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 88.383300][ T7834] netlink: 'syz.0.493': attribute type 1 has an invalid length. [ 88.452600][ T7834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.474494][ T7840] bond1: (slave geneve2): making interface the new active one [ 88.483837][ T7840] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 88.500950][ T7843] 8021q: VLANs not supported on wg2 [ 88.508506][ T7834] bond1: entered promiscuous mode [ 88.513542][ T7834] geneve2: entered promiscuous mode [ 88.965883][ T7823] netlink: 'syz.4.488': attribute type 2 has an invalid length. [ 89.089184][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.145963][ T7881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.328001][ T7904] netlink: 'syz.4.511': attribute type 2 has an invalid length. [ 89.825014][ T7910] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 89.898806][ T7923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.959264][ T7921] wg1 speed is unknown, defaulting to 1000 [ 90.029195][ T7928] __nla_validate_parse: 2 callbacks suppressed [ 90.029212][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.518'. [ 90.326081][ T7950] netlink: 33 bytes leftover after parsing attributes in process `syz.3.524'. [ 90.399851][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 90.717064][ T7919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.771251][ T7972] !: renamed from dummy0 (while UP) [ 90.816842][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 90.872460][ T7983] wg1 speed is unknown, defaulting to 1000 [ 91.037441][ T7978] pim6reg: entered allmulticast mode [ 91.083167][ T7991] wg1 speed is unknown, defaulting to 1000 [ 91.202939][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 91.326429][ T8013] netlink: 52 bytes leftover after parsing attributes in process `syz.1.541'. [ 91.360038][ T8011] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 91.371286][ T8014] sctp: [Deprecated]: syz.0.542 (pid 8014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.371286][ T8014] Use struct sctp_sack_info instead [ 91.476298][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 91.526466][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 91.549203][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 91.842097][ T8042] netlink: 248 bytes leftover after parsing attributes in process `syz.2.551'. [ 91.962594][ T8046] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 91.991438][ T8046] bond4: entered promiscuous mode [ 91.996791][ T8046] bond4: entered allmulticast mode [ 92.002286][ T8046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 92.032170][ T8046] bridge2: entered promiscuous mode [ 92.046607][ T8046] bridge2: entered allmulticast mode [ 92.057681][ T8046] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 92.099629][ T3523] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.121154][ T8058] : entered promiscuous mode [ 92.232460][ T8060] can: request_module (can-proto-0) failed. [ 92.239363][ T3523] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 92.407809][ T8077] netlink: 'syz.2.564': attribute type 18 has an invalid length. [ 92.442115][ T8075] IPVS: persistence engine module ip_vs_pe_ not found [ 93.572849][ T8137] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 93.634711][ T8137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 93.648109][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.655528][ T8148] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 93.722214][ T8147] veth7: entered promiscuous mode [ 93.740725][ T8137] erspan0: entered allmulticast mode [ 93.941409][ T8166] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 93.957626][ T8166] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 93.993380][ T8171] dvmrp1: entered allmulticast mode [ 94.015432][ T8171] dvmrp1: left allmulticast mode [ 94.042614][ T8173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.243734][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.252564][ T8182] bond0: (slave bond2): Enslaving as an active interface with an up link [ 94.350567][ T8131] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 94.496686][ T8203] netlink: 'syz.2.594': attribute type 8 has an invalid length. [ 94.788544][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.796741][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.850734][ T8226] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 94.886836][ T8226] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 94.894517][ T8226] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 95.035890][ T8241] IPVS: persistence engine module ip_vs_pe_ not found [ 95.050415][ T24] IPVS: starting estimator thread 0... [ 95.057013][ T8246] __nla_validate_parse: 24 callbacks suppressed [ 95.057030][ T8246] netlink: 52 bytes leftover after parsing attributes in process `syz.0.609'. [ 95.073259][ T8243] netlink: 316 bytes leftover after parsing attributes in process `syz.2.608'. [ 95.146140][ T8248] IPVS: using max 48 ests per chain, 115200 per kthread [ 95.197637][ T8258] netlink: del zone limit has 8 unknown bytes [ 95.237515][ T8262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.268338][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.316021][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 95.326321][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.350180][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.374594][ T8269] netlink: 676 bytes leftover after parsing attributes in process `syz.4.615'. [ 95.386874][ T8269] netlink: 676 bytes leftover after parsing attributes in process `syz.4.615'. [ 95.396500][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.412568][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.432452][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.474323][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.514904][ T8262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.579537][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.620'. [ 95.595878][ T5860] Bluetooth: hci2: command 0x0401 tx timeout [ 95.680248][ T8282] netlink: 80 bytes leftover after parsing attributes in process `syz.2.620'. [ 95.701840][ T8285] netlink: 20 bytes leftover after parsing attributes in process `syz.4.621'. [ 95.860618][ T8295] tipc: Enabled bearer , priority 0 [ 95.878922][ T8301] netlink: 388 bytes leftover after parsing attributes in process `syz.4.627'. [ 95.890398][ T8295] syzkaller0: entered promiscuous mode [ 95.900053][ T8295] syzkaller0: entered allmulticast mode [ 95.934909][ T8295] tipc: Resetting bearer [ 95.980042][ T8290] tipc: Resetting bearer [ 95.988734][ T8290] tipc: Disabling bearer [ 96.021996][ T8312] tipc: Enabling of bearer rejected, failed to enable media [ 96.110735][ T8316] wg1 speed is unknown, defaulting to 1000 [ 96.116867][ T8319] netlink: 'syz.1.633': attribute type 2 has an invalid length. [ 96.133984][ T8319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 96.159987][ T8324] bpq0: entered promiscuous mode [ 96.164959][ T8324] bpq0: entered allmulticast mode [ 96.344828][ T8329] ip6gre1: entered promiscuous mode [ 96.577898][ T8352] : entered promiscuous mode [ 96.718275][ T8358] pim6reg: entered allmulticast mode [ 96.783443][ T8356] pim6reg: left allmulticast mode [ 96.887545][ T8369] tipc: Cannot configure node identity twice [ 96.997539][ T8388] syzkaller1: entered promiscuous mode [ 97.003041][ T8388] syzkaller1: entered allmulticast mode [ 97.213178][ T8412] vlan3: entered promiscuous mode [ 97.274843][ T8414] erspan0: left allmulticast mode [ 97.350339][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.357900][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.450393][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.501650][ T8418] ip6gre1: left allmulticast mode [ 97.509559][ T8418] bond4: left promiscuous mode [ 97.514496][ T8418] bridge2: left promiscuous mode [ 97.520256][ T8418] bond4: left allmulticast mode [ 97.525270][ T8418] bridge2: left allmulticast mode [ 97.533851][ T8418] vlan3: left promiscuous mode [ 97.540100][ T3583] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.551065][ T3583] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.562272][ T3583] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.564010][ T8434] validate_nla: 1 callbacks suppressed [ 97.564027][ T8434] netlink: 'syz.0.666': attribute type 15 has an invalid length. [ 97.572750][ T3583] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.010371][ T8479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.332568][ T8509] bridge0: entered promiscuous mode [ 98.338491][ T8509] team0: Port device bridge0 added [ 98.361941][ T8511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.377231][ T8511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.393947][ T8511] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.060350][ T8562] macsec2: entered promiscuous mode [ 99.067164][ T8562] erspan0: entered promiscuous mode [ 99.074618][ T8562] erspan0: left promiscuous mode [ 99.110773][ T8571] rose2: entered promiscuous mode [ 99.131181][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 99.137778][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.145672][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.153484][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.161364][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.169219][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.177103][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.184921][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.192816][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.200651][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.208541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.216453][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.224331][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.232148][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.240014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.247829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.255703][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.263497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.271351][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.279162][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.287031][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.294828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.302691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.310540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.318481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.326321][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.334203][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.342062][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.349972][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.357799][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.365678][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.373492][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.381382][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.389217][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.397117][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.404928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.412847][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.420704][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.428607][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.436463][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.444339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.452191][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.460174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.468047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.475945][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.483757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.491616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.499516][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.507370][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.515208][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.523227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.531042][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.538900][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.546711][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.554562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 99.562394][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 99.578879][ T8575] sit0: entered promiscuous mode [ 99.589788][ T8575] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 99.899538][ T8599] wg1 speed is unknown, defaulting to 1000 [ 100.028790][ T8613] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 100.036991][ T8619] netlink: 'syz.3.722': attribute type 10 has an invalid length. [ 100.044748][ T8619] team0: left promiscuous mode [ 100.050591][ T8619] bridge0: left promiscuous mode [ 100.059228][ T8619] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.072227][ T8619] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.228895][ T8632] __nla_validate_parse: 29 callbacks suppressed [ 100.228913][ T8632] netlink: 76 bytes leftover after parsing attributes in process `syz.0.726'. [ 100.335016][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.726'. [ 100.399473][ T8642] can: request_module (can-proto-4) failed. [ 100.482247][ T8649] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.504141][ T8651] bond0: (slave bond2): Error -95 calling ndo_bpf [ 100.514852][ T8651] bond0: (slave bond2): Error -95 calling ndo_bpf [ 100.531500][ T8654] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 100.541459][ T8653] sit0: left promiscuous mode [ 100.578509][ T8653] net_ratelimit: 58 callbacks suppressed [ 100.578529][ T8653] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.629883][ T8654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.641940][ T8660] vlan2: entered promiscuous mode [ 100.668891][ T8660] bond3: entered promiscuous mode [ 100.691996][ T8660] vlan2: entered allmulticast mode [ 100.697937][ T8660] bond3: entered allmulticast mode [ 100.732792][ T8649] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.757931][ T8654] bond3: (slave gretap1): making interface the new active one [ 100.765505][ T8654] gretap1: entered promiscuous mode [ 100.771246][ T8654] gretap1: entered allmulticast mode [ 100.777488][ T8654] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 100.792179][ T8669] : entered promiscuous mode [ 100.813396][ T8670] wg1 speed is unknown, defaulting to 1000 [ 100.821449][ T8649] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.872682][ T8674] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 100.918862][ T8649] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.059864][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 101.102482][ T8667] netlink: 156 bytes leftover after parsing attributes in process `syz.2.735'. [ 101.240868][ T8699] wg1 speed is unknown, defaulting to 1000 [ 101.351511][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.747'. [ 101.434431][ T8708] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 101.444944][ T8708] netlink: 1 bytes leftover after parsing attributes in process `syz.1.749'. [ 101.448751][ T8711] netlink: 'syz.4.748': attribute type 1 has an invalid length. [ 101.470801][ T8710] netlink: 'syz.4.748': attribute type 21 has an invalid length. [ 101.489304][ T8708] tap0: tun_chr_ioctl cmd 35111 [ 101.494772][ T8708] tap0: tun_chr_ioctl cmd 1074025673 [ 101.495856][ T8710] netlink: 128 bytes leftover after parsing attributes in process `syz.4.748'. [ 101.511961][ T8710] netlink: 'syz.4.748': attribute type 4 has an invalid length. [ 101.522411][ T8710] netlink: 'syz.4.748': attribute type 5 has an invalid length. [ 101.531261][ T8710] netlink: 3 bytes leftover after parsing attributes in process `syz.4.748'. [ 101.565510][ T8714] tc_dump_action: action bad kind [ 101.628857][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 101.725172][ T8733] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 101.725361][ T8732] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.755'. [ 101.749157][ T8734] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.800973][ T3523] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.819953][ T8734] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.843839][ T3501] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.882409][ T3583] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.979653][ T8734] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.012492][ T3523] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.057706][ T8734] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.125310][ T8754] openvswitch: netlink: Message has 20 unknown bytes. [ 102.165287][ T8754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.202689][ T3523] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.216586][ T3523] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.232517][ T8759] tipc: Enabling of bearer rejected, failed to enable media [ 102.252282][ T3523] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.272762][ T8754] raw_sendmsg: syz.0.760 forgot to set AF_INET. Fix it! [ 102.282249][ T3523] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.628763][ T8782] sctp: [Deprecated]: syz.2.766 (pid 8782) Use of int in max_burst socket option. [ 102.628763][ T8782] Use struct sctp_assoc_value instead [ 103.440042][ T8792] validate_nla: 1 callbacks suppressed [ 103.440060][ T8792] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 103.612942][ T8812] wireguard0: entered promiscuous mode [ 103.623179][ T8812] wireguard0: entered allmulticast mode [ 103.632001][ T8804] wg1 speed is unknown, defaulting to 1000 [ 103.641821][ T8826] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 103.697609][ T8815] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 103.823295][ T8831] tipc: Enabled bearer , priority 0 [ 103.831887][ T8831] syzkaller0: entered promiscuous mode [ 103.838219][ T8831] syzkaller0: entered allmulticast mode [ 103.848688][ T8831] tipc: Resetting bearer [ 104.166365][ T8862] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 104.267982][ T8872] netlink: 'syz.3.792': attribute type 83 has an invalid length. [ 104.400611][ T8883] netlink: 'syz.3.797': attribute type 11 has an invalid length. [ 104.412089][ T8880] vti0: entered promiscuous mode [ 104.424706][ T8880] vti0: entered allmulticast mode [ 104.521124][ T8830] tipc: Resetting bearer [ 104.528274][ T8830] tipc: Disabling bearer [ 104.677234][ T8896] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 104.861408][ T8910] tipc: Enabled bearer , priority 0 [ 104.896057][ T8910] tipc: Resetting bearer [ 104.912683][ T8907] tipc: Disabling bearer [ 105.004350][ T8922] wg1 speed is unknown, defaulting to 1000 [ 105.081854][ T8928] tipc: Enabled bearer , priority 0 [ 105.118282][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.129940][ T8928] syzkaller0: entered promiscuous mode [ 105.141365][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.157891][ T8928] syzkaller0: entered allmulticast mode [ 105.169412][ T8928] tipc: Resetting bearer [ 105.177302][ T8927] tipc: Resetting bearer [ 105.223734][ T8927] tipc: Disabling bearer [ 105.274807][ T8945] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 105.377541][ T8945] wg1 speed is unknown, defaulting to 1000 [ 105.440671][ T8958] __nla_validate_parse: 23 callbacks suppressed [ 105.440689][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 105.480667][ T8958] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 105.493567][ T8962] nbd: nbd1 already in use [ 105.500472][ T8962] block nbd1: NBD_DISCONNECT [ 105.505237][ T8962] block nbd1: Send disconnect failed -32 [ 105.511156][ T8958] macvtap1: entered promiscuous mode [ 105.519839][ T8962] block nbd1: shutting down sockets [ 105.569543][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 105.611208][ T8964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.828'. [ 105.623479][ T8964] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 105.648360][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 105.685485][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.829'. [ 105.733109][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 105.762329][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 105.771555][ T8966] IPVS: persistence engine module ip_vs_pe_ not found [ 105.783195][ T8737] IPVS: starting estimator thread 0... [ 105.815184][ T8971] netlink: 'syz.4.831': attribute type 12 has an invalid length. [ 105.850504][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 105.860546][ T8982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 105.888981][ T8977] IPVS: using max 48 ests per chain, 115200 per kthread [ 106.007260][ T8992] syzkaller1: entered promiscuous mode [ 106.021679][ T8990] netlink: 'syz.4.837': attribute type 25 has an invalid length. [ 106.026168][ T8992] syzkaller1: entered allmulticast mode [ 106.155334][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.839'. [ 106.184214][ T8995] bridge_slave_1: left allmulticast mode [ 106.211714][ T8995] bridge_slave_1: left promiscuous mode [ 106.219516][ T8995] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.231570][ T8995] bridge_slave_0: left allmulticast mode [ 106.239739][ T8995] bridge_slave_0: left promiscuous mode [ 106.288805][ T8995] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.521411][ T9031] syz.2.851: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.546273][ T9031] CPU: 1 UID: 0 PID: 9031 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(full) [ 106.546299][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.546309][ T9031] Call Trace: [ 106.546316][ T9031] [ 106.546324][ T9031] dump_stack_lvl+0x189/0x250 [ 106.546351][ T9031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.546370][ T9031] ? __pfx__printk+0x10/0x10 [ 106.546390][ T9031] ? lock_release+0x4b/0x3e0 [ 106.546414][ T9031] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 106.546434][ T9031] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 106.546454][ T9031] warn_alloc+0x214/0x310 [ 106.546481][ T9031] ? __pfx_warn_alloc+0x10/0x10 [ 106.546508][ T9031] ? __get_vm_area_node+0x28f/0x300 [ 106.546528][ T9031] ? xskq_create+0xbf/0x170 [ 106.546550][ T9031] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 106.546580][ T9031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.546604][ T9031] ? xskq_create+0x56/0x170 [ 106.546624][ T9031] ? __kasan_kmalloc+0x93/0xb0 [ 106.546644][ T9031] vmalloc_user_noprof+0xad/0xf0 [ 106.546667][ T9031] ? xskq_create+0xbf/0x170 [ 106.546688][ T9031] xskq_create+0xbf/0x170 [ 106.546710][ T9031] xsk_init_queue+0xb0/0x110 [ 106.546893][ T9031] xsk_setsockopt+0x57b/0x8d0 [ 106.546924][ T9031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.546944][ T9031] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.546966][ T9031] ? lock_release+0x4b/0x3e0 [ 106.546988][ T9031] ? __se_sys_futex+0x36f/0x400 [ 106.547007][ T9031] ? aa_sock_opt_perm+0xff/0x1b0 [ 106.547024][ T9031] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 106.547042][ T9031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.547064][ T9031] do_sock_setsockopt+0x179/0x1b0 [ 106.547084][ T9031] __x64_sys_setsockopt+0x13f/0x1b0 [ 106.547103][ T9031] do_syscall_64+0xfa/0x3b0 [ 106.547117][ T9031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.547131][ T9031] ? clear_bhb_loop+0x60/0xb0 [ 106.547149][ T9031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.547164][ T9031] RIP: 0033:0x7f6624f8ebe9 [ 106.547180][ T9031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.547193][ T9031] RSP: 002b:00007f6625d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 106.547211][ T9031] RAX: ffffffffffffffda RBX: 00007f66251b6180 RCX: 00007f6624f8ebe9 [ 106.547223][ T9031] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 106.547233][ T9031] RBP: 00007f6625011e19 R08: 0000000000000004 R09: 0000000000000000 [ 106.547243][ T9031] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 106.547253][ T9031] R13: 00007f66251b6218 R14: 00007f66251b6180 R15: 00007fffb7eaea28 [ 106.547273][ T9031] [ 106.547554][ T9031] Mem-Info: [ 106.832532][ T9031] active_anon:7790 inactive_anon:0 isolated_anon:0 [ 106.832532][ T9031] active_file:3080 inactive_file:39838 isolated_file:0 [ 106.832532][ T9031] unevictable:768 dirty:211 writeback:0 [ 106.832532][ T9031] slab_reclaimable:11883 slab_unreclaimable:97517 [ 106.832532][ T9031] mapped:34503 shmem:4706 pagetables:1217 [ 106.832532][ T9031] sec_pagetables:0 bounce:0 [ 106.832532][ T9031] kernel_misc_reclaimable:0 [ 106.832532][ T9031] free:1310064 free_pcp:24630 free_cma:0 [ 106.907942][ T9044] wg1 speed is unknown, defaulting to 1000 [ 106.923082][ T9031] Node 0 active_anon:31108kB inactive_anon:0kB active_file:12320kB inactive_file:159148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119960kB dirty:856kB writeback:0kB shmem:17348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12504kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.958415][ T9031] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.990519][ T9031] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 107.059484][ T9031] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 107.086246][ T9031] Node 0 DMA32 free:1354892kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22172kB inactive_anon:0kB active_file:12320kB inactive_file:157568kB unevictable:1536kB writepending:908kB present:3129332kB managed:2557448kB mlocked:0kB bounce:0kB free_pcp:69416kB local_pcp:34928kB free_cma:0kB [ 107.148133][ T9031] lowmem_reserve[]: 0 0 1 1 1 [ 107.153435][ T9031] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 107.190897][ T9068] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 107.200028][ T9031] lowmem_reserve[]: 0 0 0 0 0 [ 107.205050][ T9031] Node 1 Normal free:3886168kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22552kB local_pcp:13408kB free_cma:0kB [ 107.252402][ T9031] lowmem_reserve[]: 0 0 0 0 0 [ 107.258681][ T9031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 107.271859][ T9031] Node 0 DMA32: 1008*4kB (UM) 1009*8kB (UM) 437*16kB (UM) 1594*32kB (UM) 763*64kB (UM) 78*128kB (UM) 23*256kB (UE) 15*512kB (UM) 12*1024kB (UME) 14*2048kB (UME) 286*4096kB (UM) = 1354904kB [ 107.292425][ T9031] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 107.310445][ T9031] Node 1 Normal: 140*4kB (U) 55*8kB (UME) 41*16kB (UME) 51*32kB (UME) 20*64kB (UME) 11*128kB (UME) 3*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3886168kB [ 107.332196][ T9031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.363906][ T9031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.380404][ T9031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 107.391076][ T9031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 107.402404][ T9031] 44312 total pagecache pages [ 107.410315][ T9082] bridge2: entered allmulticast mode [ 107.412673][ T9031] 0 pages in swap cache [ 107.420646][ T9031] Free swap = 124996kB [ 107.425096][ T9031] Total swap = 124996kB [ 107.431449][ T9031] 2097051 pages RAM [ 107.435437][ T9031] 0 pages HighMem/MovableOnly [ 107.442349][ T9031] 425663 pages reserved [ 107.448682][ T9031] 0 pages cma reserved [ 107.554817][ T9098] syzkaller1: entered promiscuous mode [ 107.560804][ T9098] syzkaller1: entered allmulticast mode [ 107.582428][ T9100] tipc: Enabled bearer , priority 0 [ 107.591363][ T9100] syzkaller0: entered promiscuous mode [ 107.597424][ T9100] syzkaller0: entered allmulticast mode [ 107.633639][ T9100] tipc: Resetting bearer [ 107.641316][ T9099] tipc: Resetting bearer [ 107.651297][ T9099] tipc: Disabling bearer [ 107.677009][ T9108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.700556][ T9108] bond_slave_0: entered promiscuous mode [ 107.706391][ T9108] bond_slave_1: entered promiscuous mode [ 107.714372][ T9108] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.753217][ T9108] bond2: (slave macvlan3): Enslaving as a backup interface with an up link [ 107.856823][ T9128] wg1 speed is unknown, defaulting to 1000 [ 108.074535][ T9150] tipc: Enabled bearer , priority 0 [ 108.083379][ T9150] syzkaller0: entered promiscuous mode [ 108.089019][ T9150] syzkaller0: entered allmulticast mode [ 108.101161][ T9150] tipc: Resetting bearer [ 108.109245][ T9149] tipc: Resetting bearer [ 108.116573][ T9149] tipc: Disabling bearer [ 108.145909][ T9153] tipc: Enabled bearer , priority 0 [ 108.153350][ T9153] syzkaller0: entered promiscuous mode [ 108.166149][ T9153] syzkaller0: entered allmulticast mode [ 108.400558][ T9172] wg1 speed is unknown, defaulting to 1000 [ 108.656639][ T9187] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 108.665218][ T9188] wg1 speed is unknown, defaulting to 1000 [ 108.779298][ T9194] tipc: Enabled bearer , priority 0 [ 108.787383][ T9194] syzkaller0: entered promiscuous mode [ 108.793061][ T9194] syzkaller0: entered allmulticast mode [ 108.811977][ T9194] tipc: Resetting bearer [ 108.822594][ T9193] tipc: Resetting bearer [ 108.842628][ T9193] tipc: Disabling bearer [ 109.075427][ T9202] dummy0: left promiscuous mode [ 109.092598][ T9202] dummy0: left allmulticast mode [ 109.266179][ T5929] tipc: Node number set to 3921620487 [ 109.283842][ T9202] bridge2: left allmulticast mode [ 109.309672][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.320985][ T3501] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.335025][ T3501] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.358028][ T3501] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.407298][ T9228] nbd: must specify a size in bytes for the device [ 109.534153][ T9243] tipc: Enabled bearer , priority 0 [ 109.542262][ T9243] syzkaller0: entered promiscuous mode [ 109.550607][ T9243] syzkaller0: entered allmulticast mode [ 109.561173][ T9243] tipc: Resetting bearer [ 109.608397][ T9241] tipc: Resetting bearer [ 109.619584][ T9241] tipc: Disabling bearer [ 109.828616][ T9266] wg1 speed is unknown, defaulting to 1000 [ 110.051949][ T9283] wg1 speed is unknown, defaulting to 1000 [ 110.214758][ T9304] tipc: Enabled bearer , priority 0 [ 110.224038][ T9304] syzkaller0: entered promiscuous mode [ 110.229837][ T9304] syzkaller0: entered allmulticast mode [ 110.242746][ T9304] tipc: Resetting bearer [ 110.250097][ T9303] tipc: Resetting bearer [ 110.264149][ T9303] tipc: Disabling bearer [ 110.337862][ T9308] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 110.345975][ T9308] netlink: 'syz.2.932': attribute type 2 has an invalid length. [ 110.354101][ T9309] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 110.364593][ T9309] netlink: 'syz.2.932': attribute type 2 has an invalid length. [ 110.502796][ T9318] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 110.511783][ T9318] __nla_validate_parse: 10 callbacks suppressed [ 110.511802][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 110.528031][ T9318] netlink: 'syz.2.935': attribute type 16 has an invalid length. [ 110.536025][ T9318] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 110.543902][ T9318] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.935'. [ 110.669496][ T9331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 110.710537][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 110.725905][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 110.743603][ T9339] wg1 speed is unknown, defaulting to 1000 [ 110.744302][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 110.749915][ T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.750293][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.760819][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 110.789262][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.800028][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.890803][ T9344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.942'. [ 110.974356][ T9349] tipc: Enabled bearer , priority 0 [ 110.999755][ T9349] syzkaller0: entered promiscuous mode [ 111.012148][ T9349] syzkaller0: entered allmulticast mode [ 111.039225][ T9349] tipc: Resetting bearer [ 111.048338][ T9348] tipc: Resetting bearer [ 111.057750][ T9348] tipc: Disabling bearer [ 111.141725][ T9152] tipc: Resetting bearer [ 111.153987][ T9152] tipc: Disabling bearer [ 111.218281][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.949'. [ 111.303675][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.950'. [ 111.833410][ T9409] vlan3: entered promiscuous mode [ 111.843319][ T9409] macvtap0: entered promiscuous mode [ 111.915094][ T9411] wg1 speed is unknown, defaulting to 1000 [ 112.010752][ T9422] bond0: (slave bond_slave_0): Releasing backup interface [ 112.024923][ T9422] bond0: (slave bond_slave_1): Releasing backup interface [ 112.039380][ T9422] team0: Port device team_slave_0 removed [ 112.055344][ T9422] team0: Port device team_slave_1 removed [ 112.062151][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.072186][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.087277][ T9422] bond0: (slave bond2): Releasing backup interface [ 112.102463][ T9422] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 112.106856][ T9419] wg1 speed is unknown, defaulting to 1000 [ 112.134138][ T9430] tipc: Enabling of bearer rejected, failed to enable media [ 112.469470][ T9460] openvswitch: netlink: Flow actions attr not present in new flow. [ 112.628113][ T9480] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 112.689102][ T9480] batadv_slave_0: entered promiscuous mode [ 112.712483][ T9422] syz.2.960 (9422) used greatest stack depth: 17992 bytes left [ 112.834084][ T9489] tipc: Enabled bearer , priority 0 [ 112.853803][ T9489] syzkaller0: entered promiscuous mode [ 112.859971][ T9489] syzkaller0: entered allmulticast mode [ 112.872076][ T9489] syzkaller0: mtu less than device minimum [ 112.889934][ T9487] tipc: Resetting bearer [ 112.907794][ T9487] tipc: Disabling bearer [ 113.085518][ T30] audit: type=1804 audit(1755929254.472:3): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.996" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=880 res=1 errno=0 [ 113.109749][ T30] audit: type=1800 audit(1755929254.472:4): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.996" name="cgroup.controllers" dev="tmpfs" ino=880 res=0 errno=0 [ 113.134393][ T30] audit: type=1804 audit(1755929254.472:5): pid=9516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.996" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=880 res=1 errno=0 [ 113.177822][ T9523] GUP no longer grows the stack in syz.3.997 (9523): 200000006000-20000000a000 (200000005000) [ 113.192876][ T9523] CPU: 0 UID: 0 PID: 9523 Comm: syz.3.997 Not tainted syzkaller #0 PREEMPT(full) [ 113.192904][ T9523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.192915][ T9523] Call Trace: [ 113.192922][ T9523] [ 113.192930][ T9523] dump_stack_lvl+0x189/0x250 [ 113.192958][ T9523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.192978][ T9523] ? __pfx__printk+0x10/0x10 [ 113.193001][ T9523] ? find_vma+0xe7/0x160 [ 113.193021][ T9523] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 113.193044][ T9523] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 113.193069][ T9523] __get_user_pages+0x24d0/0x2ce0 [ 113.193094][ T9523] ? __gup_longterm_locked+0xc68/0x1660 [ 113.193121][ T9523] ? __gup_longterm_locked+0xc68/0x1660 [ 113.193145][ T9523] __gup_longterm_locked+0xde9/0x1660 [ 113.193169][ T9523] ? try_grab_folio_fast+0x1be/0x4f0 [ 113.193192][ T9523] ? rcu_is_watching+0x15/0xb0 [ 113.193211][ T9523] ? rcu_is_watching+0x15/0xb0 [ 113.193230][ T9523] gup_fast_fallback+0x1e6a/0x2010 [ 113.193265][ T9523] ? __pfx_gup_fast_fallback+0x10/0x10 [ 113.193285][ T9523] ? __mutex_lock+0x335/0x1350 [ 113.193304][ T9523] ? is_valid_gup_args+0x11f/0x200 [ 113.193332][ T9523] ? get_user_pages_fast+0x4d/0xb0 [ 113.193361][ T9523] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 113.193386][ T9523] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 113.193411][ T9523] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 113.193433][ T9523] ? wait_for_space+0x24d/0x2d0 [ 113.193459][ T9523] iov_iter_get_pages2+0x5e/0xa0 [ 113.193480][ T9523] __se_sys_vmsplice+0x548/0x10d0 [ 113.193508][ T9523] ? futex_private_hash_put+0x4b/0x280 [ 113.193530][ T9523] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 113.193556][ T9523] ? __pfx_futex_wake+0x10/0x10 [ 113.193599][ T9523] ? rcu_is_watching+0x15/0xb0 [ 113.193617][ T9523] ? rcu_is_watching+0x15/0xb0 [ 113.193634][ T9523] do_syscall_64+0xfa/0x3b0 [ 113.193652][ T9523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.193669][ T9523] ? clear_bhb_loop+0x60/0xb0 [ 113.193688][ T9523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.193704][ T9523] RIP: 0033:0x7fcc5ef8ebe9 [ 113.193719][ T9523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.193733][ T9523] RSP: 002b:00007fcc5fe2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 113.193753][ T9523] RAX: ffffffffffffffda RBX: 00007fcc5f1b5fa0 RCX: 00007fcc5ef8ebe9 [ 113.193765][ T9523] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f [ 113.193776][ T9523] RBP: 00007fcc5f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.193787][ T9523] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 113.193797][ T9523] R13: 00007fcc5f1b6038 R14: 00007fcc5f1b5fa0 R15: 00007ffd087cc068 [ 113.193817][ T9523] [ 113.533407][ T9524] wg1 speed is unknown, defaulting to 1000 [ 113.639286][ T9540] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 113.651333][ T9540] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 113.830786][ T9554] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 113.839022][ T9554] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 114.144273][ T9564] wg1 speed is unknown, defaulting to 1000 [ 114.292568][ T9563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.487820][ T9587] openvswitch: netlink: IP tunnel dst address not specified [ 114.967577][ T9618] wg1 speed is unknown, defaulting to 1000 [ 115.024633][ T9621] hsr_slave_0: left promiscuous mode [ 115.031193][ T9621] hsr_slave_1: left promiscuous mode [ 115.282113][ T9629] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 115.304075][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.328371][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.532872][ T9640] validate_nla: 3 callbacks suppressed [ 115.532890][ T9640] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 115.645340][ T9640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.702451][ T9645] 8021q: adding VLAN 0 to HW filter on device bond5 [ 115.753387][ T9645] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.768854][ T9645] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 115.960739][ T9665] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 115.983200][ T9673] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 115.996262][ T9673] __nla_validate_parse: 27 callbacks suppressed [ 115.996279][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1036'. [ 116.028276][ T9673] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1036'. [ 116.057052][ T9671] tipc: Enabled bearer , priority 0 [ 116.066314][ T9671] syzkaller0: entered promiscuous mode [ 116.073128][ T9671] syzkaller0: entered allmulticast mode [ 116.103739][ T9671] netlink: 'syz.4.1035': attribute type 1 has an invalid length. [ 116.132124][ T9671] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1035'. [ 116.163131][ T9671] tipc: Resetting bearer [ 116.192761][ T9670] tipc: Resetting bearer [ 116.205009][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 116.214995][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 116.224887][ T9670] tipc: Disabling bearer [ 116.290196][ T9699] tipc: Enabled bearer , priority 0 [ 116.298386][ T9699] syzkaller0: entered promiscuous mode [ 116.310987][ T9699] syzkaller0: entered allmulticast mode [ 116.318777][ T9701] team0: entered promiscuous mode [ 116.323842][ T9701] bridge0: entered promiscuous mode [ 116.330788][ T9701] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 116.350681][ T9699] tipc: Resetting bearer [ 116.366933][ T9701] netlink: 'syz.3.1046': attribute type 4 has an invalid length. [ 116.391739][ T9698] tipc: Resetting bearer [ 116.400939][ T9698] tipc: Disabling bearer [ 116.523391][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1048'. [ 116.610029][ T9728] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1054'. [ 116.757986][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'. [ 116.768077][ T9738] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 116.774095][ T9742] team0: left promiscuous mode [ 116.778189][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 116.780962][ T9742] bridge0: left promiscuous mode [ 116.795363][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 116.797083][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.806848][ T9738] netlink: 'syz.1.1059': attribute type 7 has an invalid length. [ 116.820746][ T9742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.892035][ T9745] tipc: Enabled bearer , priority 0 [ 116.910233][ T9745] syzkaller0: entered promiscuous mode [ 116.917624][ T9745] syzkaller0: entered allmulticast mode [ 116.974723][ T9741] veth5: entered promiscuous mode [ 116.994833][ T9744] tipc: Resetting bearer [ 117.008268][ T9744] tipc: Disabling bearer [ 117.296115][ T9776] nbd: couldn't find device at index 65535 [ 117.307205][ T9776] netlink: 'syz.0.1071': attribute type 13 has an invalid length. [ 117.332645][ T9778] team0: Port device bridge0 removed [ 117.363893][ T9778] bond0: (slave team0): Releasing backup interface [ 117.401804][ T9778] bond3: (slave gretap1): Releasing active interface [ 117.411190][ T9778] gretap1: left promiscuous mode [ 117.418747][ T9778] gretap1: left allmulticast mode [ 117.927333][ T9837] tipc: Enabled bearer , priority 0 [ 117.971445][ T9837] syzkaller0: entered promiscuous mode [ 117.983297][ T9837] syzkaller0: entered allmulticast mode [ 118.004605][ T9837] tipc: Resetting bearer [ 118.083013][ T9832] tipc: Resetting bearer [ 118.091299][ T9832] tipc: Disabling bearer [ 118.101344][ T9853] syzkaller1: entered promiscuous mode [ 118.107523][ T9853] syzkaller1: entered allmulticast mode [ 118.430523][ T9893] vlan2: entered promiscuous mode [ 118.455775][ T9893] bond0: entered promiscuous mode [ 118.476819][ T9883] wg1 speed is unknown, defaulting to 1000 [ 118.490979][ T9897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 118.548530][ T9897] batman_adv: batadv0: Adding interface: ip6gretap2 [ 118.592255][ T9897] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.627482][ T9897] batman_adv: batadv0: Interface activated: ip6gretap2 [ 118.667022][ T9910] tipc: Enabled bearer , priority 0 [ 118.684755][ T9901] syzkaller0: entered promiscuous mode [ 118.691662][ T9901] syzkaller0: entered allmulticast mode [ 118.743966][ T9901] tipc: Resetting bearer [ 118.770692][ T9922] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 118.779065][ T9922] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 118.792989][ T9900] tipc: Resetting bearer [ 118.813071][ T9900] tipc: Disabling bearer [ 118.914087][ T9922] wg1 speed is unknown, defaulting to 1000 [ 119.727847][ T9979] netlink: 'syz.3.1137': attribute type 41 has an invalid length. [ 119.829291][ T9981] bridge0: port 3(erspan0) entered blocking state [ 119.862506][ T9981] bridge0: port 3(erspan0) entered disabled state [ 119.898162][ T9981] erspan0: entered allmulticast mode [ 119.928268][ T9981] erspan0: entered promiscuous mode [ 119.973391][ T9989] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.981390][ T9981] erspan0: left allmulticast mode [ 119.997296][ T9981] erspan0: left promiscuous mode [ 120.023875][ T9981] bridge0: port 3(erspan0) entered disabled state [ 120.160641][ T9998] vxcan2: entered promiscuous mode [ 120.242940][T10005] bpq0: left promiscuous mode [ 120.262525][T10005] bpq0: left allmulticast mode [ 120.430425][T10026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.594599][T10036] wg1 speed is unknown, defaulting to 1000 [ 120.622079][T10042] lo speed is unknown, defaulting to 1000 [ 120.661364][T10042] lo speed is unknown, defaulting to 1000 [ 120.667752][T10042] lo speed is unknown, defaulting to 1000 [ 120.681695][T10042] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 120.734122][T10042] lo speed is unknown, defaulting to 1000 [ 120.780399][T10042] lo speed is unknown, defaulting to 1000 [ 120.788457][T10042] lo speed is unknown, defaulting to 1000 [ 120.809097][T10042] lo speed is unknown, defaulting to 1000 [ 120.851562][T10059] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.864900][T10042] lo speed is unknown, defaulting to 1000 [ 120.873928][T10042] lo speed is unknown, defaulting to 1000 [ 120.919520][T10059] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.954322][T10068] ip6tnl2: entered promiscuous mode [ 120.972698][T10072] tipc: Enabled bearer , priority 0 [ 120.983905][T10059] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.004852][T10076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.024223][T10072] syzkaller0: entered promiscuous mode [ 121.031088][T10072] syzkaller0: entered allmulticast mode [ 121.042815][T10059] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.076964][T10071] tipc: Resetting bearer [ 121.084975][T10071] tipc: Disabling bearer [ 121.131251][T10080] syzkaller0: entered promiscuous mode [ 121.145760][T10080] syzkaller0: entered allmulticast mode [ 121.290820][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.315111][T10099] lo speed is unknown, defaulting to 1000 [ 121.321517][T10099] lo speed is unknown, defaulting to 1000 [ 121.328276][T10099] lo speed is unknown, defaulting to 1000 [ 121.335769][ T3540] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.368336][ T3540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.377970][ T3540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.442653][T10103] __nla_validate_parse: 31 callbacks suppressed [ 121.442671][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 121.465847][T10103] geneve2: entered promiscuous mode [ 121.478917][T10103] geneve2: entered allmulticast mode [ 121.529398][ T3540] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.548391][ T3540] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.570524][T10099] infiniband syz0: set down [ 121.575787][ T3540] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.584083][T10099] infiniband syz0: added lo [ 121.598392][ T10] lo speed is unknown, defaulting to 1000 [ 121.629540][T10099] RDS/IB: syz0: added [ 121.633650][T10099] smc: adding ib device syz0 with port count 1 [ 121.641464][T10099] smc: ib device syz0 port 1 has pnetid [ 121.659985][ T3540] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.668855][ T8735] lo speed is unknown, defaulting to 1000 [ 121.674739][T10099] lo speed is unknown, defaulting to 1000 [ 121.678316][T10108] wg1 speed is unknown, defaulting to 1000 [ 121.751439][T10108] lo speed is unknown, defaulting to 1000 [ 121.784980][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 121.786482][T10099] lo speed is unknown, defaulting to 1000 [ 121.794605][T10115] wg1 speed is unknown, defaulting to 1000 [ 121.825079][T10115] lo speed is unknown, defaulting to 1000 [ 121.842807][T10128] tipc: Enabled bearer , priority 0 [ 121.850612][T10128] syzkaller0: entered promiscuous mode [ 121.858735][T10128] syzkaller0: entered allmulticast mode [ 121.868046][T10127] tipc: Resetting bearer [ 121.870133][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 121.889077][T10127] tipc: Disabling bearer [ 121.897606][T10131] bond0: (slave rose0): Error: Device can not be enslaved while up [ 121.919397][T10130] bond0: (slave rose0): Error: Device can not be enslaved while up [ 121.967826][T10108] lo speed is unknown, defaulting to 1000 [ 122.125331][T10096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.200333][T10115] lo speed is unknown, defaulting to 1000 [ 122.369974][T10099] lo speed is unknown, defaulting to 1000 [ 122.538017][T10099] lo speed is unknown, defaulting to 1000 [ 122.679846][T10099] lo speed is unknown, defaulting to 1000 [ 123.015303][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1193'. [ 123.221923][T10161] tipc: Enabling of bearer rejected, failed to enable media [ 123.446338][T10170] wg1 speed is unknown, defaulting to 1000 [ 123.446501][T10172] tipc: Enabled bearer , priority 0 [ 123.473688][T10170] lo speed is unknown, defaulting to 1000 [ 123.481148][T10172] syzkaller0: entered promiscuous mode [ 123.487358][T10172] syzkaller0: entered allmulticast mode [ 123.498582][T10170] lo speed is unknown, defaulting to 1000 [ 123.629370][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1199'. [ 124.181862][T10197] sit0: entered promiscuous mode [ 124.216667][T10197] validate_nla: 3 callbacks suppressed [ 124.216687][T10197] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 124.266109][T10197] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1203'. [ 124.379327][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 124.426503][T10204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1206'. [ 124.451280][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 124.566085][ T10] tipc: Node number set to 1078438269 [ 124.614779][T10210] tipc: Enabled bearer , priority 0 [ 124.637946][T10210] syzkaller0: entered promiscuous mode [ 124.643456][T10210] syzkaller0: entered allmulticast mode [ 124.672560][T10214] netlink: 'syz.2.1211': attribute type 21 has an invalid length. [ 124.695694][T10214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1211'. [ 124.762151][T10209] tipc: Resetting bearer [ 124.770637][T10222] delete_channel: no stack [ 124.797663][T10209] tipc: Disabling bearer [ 124.851203][T10208] veth0: entered promiscuous mode [ 124.920248][T10231] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 125.111288][T10233] wg1 speed is unknown, defaulting to 1000 [ 125.150918][T10233] lo speed is unknown, defaulting to 1000 [ 125.178265][T10233] lo speed is unknown, defaulting to 1000 [ 125.370786][T10208] veth0: left promiscuous mode [ 125.762422][T10279] tipc: Failed to remove unknown binding: 66,1,1/0:1593687519/1593687521 [ 125.786492][T10279] tipc: Failed to remove unknown binding: 66,1,1/0:1593687519/1593687521 [ 125.794962][T10279] tipc: Failed to remove unknown binding: 66,1,1/0:1593687519/1593687521 [ 125.899220][T10286] tipc: Enabled bearer , priority 0 [ 125.908700][T10286] syzkaller0: entered promiscuous mode [ 125.926353][T10286] syzkaller0: entered allmulticast mode [ 125.953396][T10285] tipc: Resetting bearer [ 126.000781][T10285] tipc: Disabling bearer [ 126.195872][T10302] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 126.209830][T10302] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 126.304901][T10309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.322448][T10309] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 126.348664][T10309] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 126.467728][T10322] __nla_validate_parse: 4 callbacks suppressed [ 126.467748][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1236'. [ 126.710090][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 126.748541][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1241'. [ 126.841371][T10347] tipc: Enabled bearer , priority 0 [ 126.891457][T10347] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 126.908371][T10347] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 126.916772][T10347] tipc: Resetting bearer [ 127.020724][T10357] _ÐZ`Ô€@: entered promiscuous mode [ 127.078655][T10363] tipc: Enabling of bearer rejected, already enabled [ 127.336030][T10392] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 127.343392][T10388] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 127.409427][T10388] bridge_slave_0: left allmulticast mode [ 127.415104][T10388] bridge_slave_0: left promiscuous mode [ 127.434895][T10397] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1254'. [ 127.456704][T10388] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.494941][T10388] bridge_slave_1: left allmulticast mode [ 127.503238][T10388] bridge_slave_1: left promiscuous mode [ 127.509216][T10404] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 127.529141][T10388] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.578857][T10388] bond0: (slave bond_slave_0): Releasing backup interface [ 127.601544][T10388] bond_slave_0: left promiscuous mode [ 127.610768][T10388] bond0: (slave bond_slave_1): Releasing backup interface [ 127.620608][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1259'. [ 127.637871][T10388] bond_slave_1: left promiscuous mode [ 127.649692][T10388] team0: Port device team_slave_0 removed [ 127.660212][T10388] team0: Port device team_slave_1 removed [ 127.668946][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.677133][T10388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.686918][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.694487][T10388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.713507][T10388] bond1: (slave geneve2): Releasing active interface [ 127.724606][T10388] geneve2: left promiscuous mode [ 127.749471][T10388] bond2: (slave macvlan3): Removing an active aggregator [ 127.770793][T10388] bond2: (slave macvlan3): Releasing backup interface [ 127.803288][T10394] lo: Caught tx_queue_len zero misconfig [ 127.814775][T10404] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 127.839105][T10406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1257'. [ 127.853601][ T49] tipc: Resetting bearer [ 127.864998][T10408] tipc: Enabled bearer , priority 0 [ 127.905458][T10400] tipc: Resetting bearer [ 127.920940][T10438] IPv6: sit1: Disabled Multicast RS [ 127.939230][T10438] sit1: entered allmulticast mode [ 127.973841][T10395] tipc: Disabling bearer [ 127.996354][ T5929] tipc: Node number set to 3448328583 [ 128.122445][T10456] Bluetooth: MGMT ver 1.23 [ 128.613553][T10489] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1272'. [ 128.663009][T10493] netlink: 'syz.2.1271': attribute type 9 has an invalid length. [ 128.675295][T10493] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.1271'. [ 128.813119][T10502] wg1 speed is unknown, defaulting to 1000 [ 128.831943][T10502] lo speed is unknown, defaulting to 1000 [ 128.851038][T10502] lo speed is unknown, defaulting to 1000 [ 129.197649][T10518] tipc: Enabling of bearer rejected, already enabled [ 129.237265][T10518] tipc: Resetting bearer [ 129.302230][T10502] netlink: 'syz.1.1274': attribute type 13 has an invalid length. [ 129.320724][T10502] netlink: 'syz.1.1274': attribute type 17 has an invalid length. [ 129.349562][T10502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.369185][T10532] netlink: 'syz.0.1279': attribute type 12 has an invalid length. [ 129.405714][T10478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.420004][T10478] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 129.433540][T10478] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.445668][T10478] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 129.479343][T10478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.503770][T10478] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 129.540924][T10478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.556615][T10478] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 129.574089][T10540] netlink: 'syz.0.1280': attribute type 21 has an invalid length. [ 129.592923][T10540] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 129.608584][T10478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.616962][T10478] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 129.649052][ T8097] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 129.660979][ T8097] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 129.669412][ T8097] CPU: 0 UID: 0 PID: 8097 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 129.678968][ T8097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.689061][ T8097] RIP: 0010:klist_del+0x49/0x110 [ 129.694193][ T8097] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 20 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 20 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 129.713807][ T8097] RSP: 0018:ffffc9000b3df768 EFLAGS: 00010202 [ 129.719910][ T8097] RAX: 000000000000000b RBX: ffff888053ab1860 RCX: ffff8880266cda00 [ 129.727901][ T8097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 129.735879][ T8097] RBP: ffffc9000b3df890 R08: ffff888058a1b4b3 R09: 1ffff1100b143696 [ 129.743860][ T8097] R10: dffffc0000000000 R11: ffffed100b143697 R12: dffffc0000000000 [ 129.751927][ T8097] R13: 1ffff1100a75630c R14: 0000000000000000 R15: ffff888032d54750 [ 129.759904][ T8097] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 129.768828][ T8097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.775398][ T8097] CR2: 000020000013b030 CR3: 00000000567ba000 CR4: 00000000003526f0 [ 129.783362][ T8097] Call Trace: [ 129.786629][ T8097] [ 129.789549][ T8097] device_del+0x280/0x8e0 [ 129.793868][ T8097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 129.799063][ T8097] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 129.805209][ T8097] ? __pfx_device_del+0x10/0x10 [ 129.810047][ T8097] ? netdev_unregister_kobject+0x344/0x450 [ 129.815844][ T8097] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 129.822248][ T8097] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 129.829000][ T8097] ? do_raw_spin_lock+0x121/0x290 [ 129.834015][ T8097] ? rtnl_net_dev_lock+0x257/0x2f0 [ 129.839115][ T8097] ? rcu_is_watching+0x15/0xb0 [ 129.843865][ T8097] unregister_netdevice_queue+0x33c/0x380 [ 129.849574][ T8097] ? rcu_is_watching+0x15/0xb0 [ 129.854325][ T8097] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 129.860552][ T8097] ? down_write+0x162/0x1f0 [ 129.865045][ T8097] ? rtnl_net_dev_lock+0x36/0x2f0 [ 129.870062][ T8097] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 129.875166][ T8097] unregister_netdev+0x1f/0x60 [ 129.879916][ T8097] bnep_session+0x294d/0x2b40 [ 129.884579][ T8097] ? rcu_is_watching+0x15/0xb0 [ 129.889324][ T8097] ? trace_sched_exit_tp+0x36/0x110 [ 129.894510][ T8097] ? __schedule+0x17ae/0x4cc0 [ 129.899187][ T8097] ? __pfx_bnep_session+0x10/0x10 [ 129.904203][ T8097] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.910083][ T8097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.916401][ T8097] ? __pfx_woken_wake_function+0x10/0x10 [ 129.922027][ T8097] ? __kthread_parkme+0x7b/0x200 [ 129.926949][ T8097] ? __kthread_parkme+0x1a1/0x200 [ 129.931964][ T8097] kthread+0x70e/0x8a0 [ 129.936109][ T8097] ? __pfx_bnep_session+0x10/0x10 [ 129.941120][ T8097] ? __pfx_kthread+0x10/0x10 [ 129.945699][ T8097] ? rcu_is_watching+0x15/0xb0 [ 129.950479][ T8097] ? __pfx_kthread+0x10/0x10 [ 129.955158][ T8097] ret_from_fork+0x3f9/0x770 [ 129.959767][ T8097] ? __pfx_ret_from_fork+0x10/0x10 [ 129.964873][ T8097] ? __switch_to_asm+0x39/0x70 [ 129.969631][ T8097] ? __switch_to_asm+0x33/0x70 [ 129.974385][ T8097] ? __pfx_kthread+0x10/0x10 [ 129.978968][ T8097] ret_from_fork_asm+0x1a/0x30 [ 129.983727][ T8097] [ 129.986729][ T8097] Modules linked in: [ 129.992981][ T8097] ---[ end trace 0000000000000000 ]--- [ 130.000959][ T8097] RIP: 0010:klist_del+0x49/0x110 [ 130.006055][ T8097] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 89 20 b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 6b 20 b3 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 130.026198][ T8097] RSP: 0018:ffffc9000b3df768 EFLAGS: 00010202 [ 130.032299][ T8097] RAX: 000000000000000b RBX: ffff888053ab1860 RCX: ffff8880266cda00 [ 130.040499][ T8097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 130.048611][ T8097] RBP: ffffc9000b3df890 R08: ffff888058a1b4b3 R09: 1ffff1100b143696 [ 130.057008][ T8097] R10: dffffc0000000000 R11: ffffed100b143697 R12: dffffc0000000000 [ 130.064996][ T8097] R13: 1ffff1100a75630c R14: 0000000000000000 R15: ffff888032d54750 [ 130.073226][ T8097] FS: 0000000000000000(0000) GS:ffff888125c18000(0000) knlGS:0000000000000000 [ 130.082995][ T8097] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.090121][ T8097] CR2: 000020000013b030 CR3: 000000005ee68000 CR4: 00000000003526f0 [ 130.098197][ T8097] Kernel panic - not syncing: Fatal exception [ 130.104539][ T8097] Kernel Offset: disabled [ 130.108853][ T8097] Rebooting in 86400 seconds..